Static task
static1
Behavioral task
behavioral1
Sample
14073185e4fcff4d9d0656e10192113f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
14073185e4fcff4d9d0656e10192113f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14073185e4fcff4d9d0656e10192113f_JaffaCakes118
-
Size
166KB
-
MD5
14073185e4fcff4d9d0656e10192113f
-
SHA1
81ea4efd52361e76e3fd1061c58d86b2e6f67df9
-
SHA256
a8a859111c762cdbe0f7e40cc76a07c8f2f35e9fbf04e0f278ce764a3ebfaabf
-
SHA512
323bc496158034e09c2baf9b692294090060127da63b90f0dda2bec2b185bc96e1ffeb4f5a929045544ea5271c0be24364ceff7ce58f946c2f38e148b2939b53
-
SSDEEP
3072:/e2SH+lRtcBrk68sGQLElPWBCExc3NasIJw8q0za77Ta2UTicCgLit6U3S1kh:g+zipMQLElPf81za/BILitwkh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14073185e4fcff4d9d0656e10192113f_JaffaCakes118
Files
-
14073185e4fcff4d9d0656e10192113f_JaffaCakes118.exe windows:4 windows x86 arch:x86
11f3bafe8240bb40e0c4c1307bb90e41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
msvfw32
ICInfo
ole32
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
kernel32
GetModuleFileNameA
GetOEMCP
GetSystemDirectoryW
FreeEnvironmentStringsA
GetLastError
LoadLibraryA
SetStdHandle
HeapCreate
FlushInstructionCache
GetStartupInfoW
WriteConsoleInputVDMA
InterlockedExchange
GetCurrentProcess
HeapDestroy
GetConsoleMode
UnhandledExceptionFilter
TlsSetValue
VirtualAlloc
SetUnhandledExceptionFilter
CreateSemaphoreW
GetCPInfo
GetModuleFileNameW
GetCurrentProcessId
GetTickCount
ExitProcess
GetACP
FreeLibrary
WritePrivateProfileSectionW
WideCharToMultiByte
LCMapStringA
GetDriveTypeW
GetCommandLineA
LocalFree
CreateProcessW
GetProcessHandleCount
LocalAlloc
TlsAlloc
lstrcmpA
DeleteFileW
InterlockedIncrement
SetHandleCount
SetFilePointer
GetFileAttributesW
GetEnvironmentStrings
FindResourceW
RaiseException
ReadFile
GetFileSize
CreateFileMappingW
RtlUnwind
CloseHandle
GetCurrentThreadId
LCMapStringW
WaitForSingleObject
GetStringTypeA
IsDebuggerPresent
GetEnvironmentStringsW
LockResource
FlushFileBuffers
TlsGetValue
SetLastError
EnumResourceNamesA
GetStartupInfoA
LoadResource
GetConsoleCP
GetSystemTimeAsFileTime
GetModuleHandleA
HeapFree
CreateFileW
LoadLibraryW
GetFileType
InterlockedDecrement
WriteConsoleW
GetVersionExW
GetCommandLineW
lstrlenA
DeleteCriticalSection
FreeEnvironmentStringsW
GetThreadLocale
GetLocaleInfoA
LeaveCriticalSection
HeapAlloc
IsProcessorFeaturePresent
QueryPerformanceCounter
MulDiv
InterlockedCompareExchange
CopyFileW
GetConsoleOutputCP
WriteFile
GetStdHandle
lstrcmpiW
SizeofResource
GetVersion
VirtualFree
InitializeCriticalSection
TlsFree
HeapSize
GetModuleHandleW
GetProcAddress
GetProcessHeap
CreateFileA
GetVersionExA
Sleep
GetStringTypeW
WriteConsoleA
HeapReAlloc
LoadLibraryExW
lstrlenW
user32
GetWindowRect
RegisterClassExW
DestroyWindow
GetWindowInfo
GetDC
GetDlgItemTextW
GetDlgItem
TranslateMessage
SetCapture
GetWindow
LoadCursorW
GetClassInfoExW
SetDlgItemTextW
MessageBoxW
SetWindowPos
DispatchMessageW
GetWindowTextLengthW
SetWindowTextW
BeginPaint
GetParent
GetClientRect
PeekMessageW
CreateWindowExW
EndPaint
SystemParametersInfoW
MapWindowPoints
EndDialog
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ