Static task
static1
Behavioral task
behavioral1
Sample
09071e24fe9552b9c4ec13837820dd31_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
09071e24fe9552b9c4ec13837820dd31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09071e24fe9552b9c4ec13837820dd31_JaffaCakes118
-
Size
316KB
-
MD5
09071e24fe9552b9c4ec13837820dd31
-
SHA1
ef00ce47cc9a056223f696282b044fec5ff30b1f
-
SHA256
ac215934ba2358c803f9e23f88f93f6c34fad4df7df05050fdc9627e45606142
-
SHA512
f3ca53a0a90bb0d8c38e79bd4e50597867363a9b96d7f17713fd1a2c1c196833513adc8889a3b73e14140a278cf34658e758a646b70a9fc49e556eb00ac3b4d0
-
SSDEEP
6144:iI3IAkq02RxflSv46xy5ePY6Od/w2F6QxoS95P8MpdveJhXGPrmhc6C6WX:FIANxx54YNagjeJh2PSG6C6WX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09071e24fe9552b9c4ec13837820dd31_JaffaCakes118
Files
-
09071e24fe9552b9c4ec13837820dd31_JaffaCakes118.exe windows:4 windows x86 arch:x86
119a36cac2e376f4eeb2351b85717784
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleKeyboardLayoutNameA
GetVolumeInformationA
UpdateResourceA
FillConsoleOutputCharacterA
GetVersionExA
GetModuleHandleA
GetSystemDirectoryA
ReadConsoleOutputAttribute
CreateDirectoryExW
OpenJobObjectA
SetProcessPriorityBoost
_lclose
ReadConsoleInputA
ExitThread
GetProcessShutdownParameters
GetConsoleInputExeNameA
GetVDMCurrentDirectories
GlobalUnlock
GetCommandLineA
GetCommTimeouts
VirtualAllocEx
GetProcessHeap
GetCurrentDirectoryA
GetConsoleAliasExesW
GetTimeZoneInformation
PeekConsoleInputA
LoadResource
OutputDebugStringA
VerifyVersionInfoA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
LocalUnlock
FlushViewOfFile
MoveFileWithProgressA
SetConsoleCursorPosition
CreateFileMappingA
FatalExit
GetCommandLineA
GetWindowsDirectoryA
GetSystemTime
SetThreadExecutionState
GetTempPathA
GetMailslotInfo
LocalReAlloc
GetPriorityClass
DeleteTimerQueueTimer
IsValidLanguageGroup
SetupComm
MoveFileExA
GetNamedPipeHandleStateA
GetStdHandle
OpenProcess
DefineDosDeviceA
BuildCommDCBA
OpenJobObjectA
GetEnvironmentVariableA
GetCurrentThreadId
Module32Next
ReadConsoleA
GetSystemTimes
UnmapViewOfFile
GetTickCount
GetConsoleCursorInfo
GetWriteWatch
CallNamedPipeA
GetShortPathNameA
WriteConsoleOutputA
ResetEvent
GetThreadTimes
GetDiskFreeSpaceExA
FindFirstVolumeMountPointA
FindCloseChangeNotification
EnumResourceLanguagesA
GetProcessTimes
GetPrivateProfileStringA
WriteConsoleOutputCharacterA
MultiByteToWideChar
GetTempPathA
VirtualQuery
GetPrivateProfileSectionNamesA
FreeConsole
Process32First
ReadConsoleOutputCharacterA
GetStartupInfoA
GetConsoleAliasExesLengthW
GetCalendarInfoA
GetThreadSelectorEntry
SetHandleInformation
SetCommConfig
SetFileShortNameA
QueryDosDeviceA
GetCurrentThread
EnumResourceTypesA
HeapSize
GetLocaleInfoA
DuplicateHandle
OpenEventA
ReplaceFile
ExpungeConsoleCommandHistoryA
ReadFileScatter
ReadConsoleA
ChangeTimerQueueTimer
GetTempPathA
GetCompressedFileSizeA
GetEnvironmentVariableA
LockResource
ExitProcess
GetConsoleInputExeNameA
GlobalHandle
GetDllDirectoryA
ReadConsoleA
SetFileValidData
FlushFileBuffers
SetConsoleCtrlHandler
GetConsoleHardwareState
GetConsoleCursorInfo
ProcessIdToSessionId
_hwrite
IsSystemResumeAutomatic
GetVersionExA
SetWaitableTimer
FlushFileBuffers
SetCurrentDirectoryA
TerminateThread
GetCurrentProcessId
_lwrite
GetCommProperties
WriteConsoleInputA
GetLogicalDriveStringsA
SetEnvironmentVariableA
GetSystemWindowsDirectoryA
GetFileSizeEx
SetThreadUILanguage
SetConsoleCursorMode
GetCurrentThread
GetDateFormatA
SetConsoleDisplayMode
SetEndOfFile
GetProcessWorkingSetSize
GetThreadPriorityBoost
GetSystemRegistryQuota
FreeEnvironmentStringsA
WriteConsoleOutputCharacterA
OpenFileMappingA
GlobalAddAtomA
BuildCommDCBA
SetProcessWorkingSetSize
GlobalCompact
SetTimerQueueTimer
GetCurrentConsoleFont
IsBadCodePtr
WriteConsoleOutputA
SetVolumeMountPointA
PrepareTape
GetExitCodeThread
SetComputerNameExA
lstrcpynA
GetSystemDefaultLangID
LockFileEx
OpenWaitableTimerA
GetDefaultCommConfigA
DeleteTimerQueueEx
GetDllDirectoryA
ReadConsoleOutputA
WriteConsoleA
SetFileAttributesA
FindResourceExA
GetFileInformationByHandle
ClearCommBreak
UnlockFile
GetFileAttributesExA
GetVersionExA
SetLocalPrimaryComputerNameA
GetSystemDefaultLCID
SuspendThread
GetEnvironmentStringsA
SetConsoleNumberOfCommandsA
GetCommProperties
GetConsoleCommandHistoryA
GetStringTypeExA
user32
UnregisterClassA
EnumChildWindows
SendMessageA
LoadKeyboardLayoutEx
CreateDialogIndirectParamA
SendNotifyMessageA
SetLastErrorEx
LoadCursorA
OpenClipboard
GetKeyboardLayoutList
RealChildWindowFromPoint
ScrollChildren
OpenDesktopA
RegisterDeviceNotificationA
RegisterClassExA
GetClipboardSequenceNumber
SetClipboardData
GetRawInputDeviceInfoA
SetDlgItemTextA
LoadMenuIndirectA
UnpackDDElParam
GetMenuDefaultItem
GetComboBoxInfo
DlgDirListComboBoxW
OffsetRect
FrameRect
GetWindowWord
GetInputDesktop
GetMenuBarInfo
DefRawInputProc
GetInputState
DefRawInputProc
GetWindowTextA
CharLowerA
IsWindowVisible
MapVirtualKeyExA
SetWindowWord
SetWindowsHookExA
ShowCaret
MapVirtualKeyExW
InvertRect
PeekMessageA
OemToCharBuffW
LoadImageA
GetClassInfoExW
EnableMenuItem
DlgDirListComboBoxA
IsZoomed
InvalidateRgn
SetSysColorsTemp
EnumPropsA
MonitorFromWindow
GrayStringA
DrawTextExA
SetDebugErrorLevel
CreateWindowStationA
LoadMenuIndirectA
EnableScrollBar
UpdateLayeredWindow
GetSubMenu
UnhookWindowsHookEx
IsDialogMessageA
SetWindowPlacement
CreateMDIWindowA
SetFocus
ChangeDisplaySettingsExW
DestroyAcceleratorTable
PeekMessageA
SetSysColorsTemp
GetWindowTextLengthA
SetMenu
FlashWindowEx
MessageBeep
MessageBoxIndirectA
RegisterLogonProcess
MapVirtualKeyExA
MessageBoxIndirectA
SetDebugErrorLevel
DestroyReasons
ChangeMenuA
CheckRadioButton
SetDlgItemInt
GetPropA
MapVirtualKeyExW
GetCursorPos
GetAltTabInfoA
IsRectEmpty
RegisterDeviceNotificationA
advapi32
DuplicateToken
Sections
.itext Size: - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 172KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ