Static task
static1
Behavioral task
behavioral1
Sample
0af6b97f1148fd468f493fa0167f783e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0af6b97f1148fd468f493fa0167f783e_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0af6b97f1148fd468f493fa0167f783e_JaffaCakes118
-
Size
88KB
-
MD5
0af6b97f1148fd468f493fa0167f783e
-
SHA1
67787f098042fc2b2f57a12df19de650f186c4a8
-
SHA256
b53e46b3fca8c6d87fc7f0388c91291c488b104ad246eed665b63434b6108eb9
-
SHA512
b54ff0cd5bfee78506ed1bc5373675b469d8b8f0007eef74e3d65493d76fba6369557a8c384d4db75fd2b18e71e696170abf2e2f0832fb89ef77b57a034a1575
-
SSDEEP
1536:2+z39FKEP5Xsym2lOxUjRFwa+1ODRbyr5ijwHaIwNHxTo+SoWbT:2++K5U28YDuMdIwNRTo+DeT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af6b97f1148fd468f493fa0167f783e_JaffaCakes118
Files
-
0af6b97f1148fd468f493fa0167f783e_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d2cfe0b5ed314035902e7fff442fd8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetPriorityClass
GetCurrentProcess
ResumeThread
GetCurrentThreadId
CreateEventA
SetEvent
GetExitCodeThread
GetStartupInfoA
ExitProcess
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
DebugBreak
EnumResourceNamesA
GetProcessHeap
HeapReAlloc
HeapFree
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
WaitForMultipleObjects
GetFileAttributesA
GetDriveTypeA
lstrcpynA
ReadFile
GetFileSize
GetLastError
CallNamedPipeA
GetUserDefaultLangID
lstrcmpiA
lstrlenW
GetTempPathA
GetTempFileNameA
FindResourceA
SizeofResource
LoadResource
LockResource
SetFileAttributesA
GetModuleHandleA
SetLastError
GetWindowsDirectoryA
GetShortPathNameA
CreateFileA
WriteFile
CloseHandle
DeleteFileA
MoveFileA
GetModuleFileNameA
lstrcpyA
GetTickCount
CopyFileA
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FreeLibrary
lstrlenA
HeapAlloc
lstrcatA
user32
CharNextA
GetKeyboardType
PeekMessageA
MsgWaitForMultipleObjects
wvsprintfA
SetWindowTextA
GetDC
ReleaseDC
GetSysColor
LoadStringA
GetClientRect
KillTimer
LoadCursorA
SetCursor
SetWindowLongA
GetWindowTextA
PostMessageA
SetTimer
InvalidateRect
UpdateWindow
RedrawWindow
GetDlgItem
EnableWindow
SetForegroundWindow
SendMessageA
SendDlgItemMessageA
GetWindowRect
SetWindowPos
LoadImageA
PostQuitMessage
DefWindowProcA
RegisterClassExA
CreateWindowExA
GetMessageA
BeginDeferWindowPos
ScreenToClient
DeferWindowPos
EndDeferWindowPos
EndDialog
GetSystemMetrics
TranslateMessage
DispatchMessageA
wsprintfA
MapWindowPoints
gdi32
GetDeviceCaps
SelectPalette
CreateHalftonePalette
UpdateColors
SetTextColor
CreateFontIndirectA
CreateCompatibleDC
GetObjectA
DeleteObject
RealizePalette
BitBlt
DeleteDC
SelectObject
advapi32
RegFlushKey
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
shell32
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
StrRChrA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
oleaut32
SysAllocString
VariantInit
VariantClear
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ