Static task
static1
Behavioral task
behavioral1
Sample
1433bef82a3a202f4c3431879de9cc06_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1433bef82a3a202f4c3431879de9cc06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1433bef82a3a202f4c3431879de9cc06_JaffaCakes118
-
Size
114KB
-
MD5
1433bef82a3a202f4c3431879de9cc06
-
SHA1
d6b3ccbf301f0a523acce9ab691898b7b09f531c
-
SHA256
c9bd1ad336cba6452b68ffd7f0e147c31b03f22f1c3e17ec3cd6fb4143e611df
-
SHA512
3186d5b78f0cb19bbf98122200b289e59058a522b673aed5455eb94461688bb2f109583d8921f769fa8e28fe1196a7fa83dbc752e4a3721df6ec546a82371c27
-
SSDEEP
3072:SJ10ekCC8/lSBSN99N+FavKC4CU+RLtaVqmom:2+hCC8Qx4tUQLt6Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1433bef82a3a202f4c3431879de9cc06_JaffaCakes118
Files
-
1433bef82a3a202f4c3431879de9cc06_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9a5233283fb220b80c6f2ea6d2696fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
SetEndOfFile
SetErrorMode
GetCurrentThreadId
FreeEnvironmentStringsW
RtlUnwind
RegisterWaitForSingleObject
DeleteCriticalSection
GetProcessHeap
GetSystemTimeAsFileTime
CreateFileW
GetFileSize
SetLastError
IsDebuggerPresent
CreateEventW
CreateThread
SetFilePointerEx
ExitProcess
WideCharToMultiByte
GetACP
SetUnhandledExceptionFilter
LCMapStringW
GetFileSizeEx
FreeLibrary
InterlockedIncrement
FlushFileBuffers
WaitForMultipleObjectsEx
GlobalFree
GlobalAlloc
GetFileAttributesW
DeleteFileA
GlobalAlloc
Sleep
InitializeCriticalSectionAndSpinCount
SleepEx
MultiByteToWideChar
WaitForSingleObject
HeapFree
InterlockedDecrement
InterlockedExchangeAdd
CreateFileA
GetTickCount
GetVersionExA
GetCommandLineW
HeapAlloc
SetFilePointer
CreateEventA
HeapSize
TerminateProcess
GetModuleHandleA
WriteFileEx
GetModuleFileNameA
GetCPInfo
GetEnvironmentStringsW
TlsSetValue
VirtualAlloc
TlsGetValue
LeaveCriticalSection
CloseHandle
GetCommandLineA
WaitForSingleObjectEx
SetEnvironmentVariableA
InitializeCriticalSection
GetModuleHandleW
GetLastError
GetSystemInfo
GetVersion
CompareStringW
GetStringTypeA
GetCurrentThread
SizeofResource
GetCurrentDirectoryA
WriteFile
FormatMessageW
LoadResource
TryEnterCriticalSection
LCMapStringA
UnhandledExceptionFilter
GetLocaleInfoA
GetSystemTime
GetOEMCP
FreeEnvironmentStringsA
InterlockedCompareExchange
GetCurrentProcessId
GetModuleHandleW
LoadLibraryA
GetVersionExW
GetCurrentProcess
lstrlenA
GetEnvironmentStrings
GetStartupInfoA
TlsAlloc
EnterCriticalSection
FindCloseChangeNotification
GetLocalTime
LocalAlloc
GetStringTypeW
FindClose
GetProcAddress
SetEvent
user32
GetDlgItem
ShowWindow
GetMenuItemCount
GetDC
EnableWindow
GetDCEx
SetCursorPos
GetClientRect
GetWindowRect
GetParent
GetWindowLongA
GetMenuState
GetDlgItemInt
GetWindowTextA
SendMessageA
SetWindowPos
IsWindowEnabled
LoadStringA
GetDlgItemTextA
GetSystemMetrics
MessageBoxA
GetWindowPlacement
GetDlgItemTextW
SetForegroundWindow
GetWindowTextLengthW
shlwapi
StrToIntExA
StrToIntW
PathAddBackslashW
SHDeleteKeyW
StrCmpNW
PathFileExistsW
PathCombineW
StrCmpW
StrStrW
PathAppendW
StrStrIW
msi
MsiConfigureFeatureW
MsiInstallMissingComponentW
MsiGetSourcePathW
MsiConfigureProductW
MsiGetSummaryInformationW
MsiAdvertiseProductW
MsiRecordClearData
MsiGetPropertyW
MsiCloseAllHandles
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ