Static task
static1
Behavioral task
behavioral1
Sample
1797598793cfebbd40bd39ce2595e17f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1797598793cfebbd40bd39ce2595e17f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1797598793cfebbd40bd39ce2595e17f_JaffaCakes118
-
Size
113KB
-
MD5
1797598793cfebbd40bd39ce2595e17f
-
SHA1
fccdf7a7da008229ccda9f504927fffeffde4c14
-
SHA256
e31c3626c0289579bfadddd923f70547f49ed38ccab9acfb52b96e28269fb63a
-
SHA512
b8ae0d3026025600ed423dfca3a4446243802a06d23ea2126cf7cd9d3318b0a3cbcd8b9b3f2c579515b746e488a640351436467b0fedb20d037d853b3abd2ed5
-
SSDEEP
1536:SRlTdqfYpHl4zuEUuCHCHzJYRkFI4oc7xSqJFxHOsEFQ/7s1UEjU1EyybECo5VV8:MeY0rCHCHzJY+FIjq3heQzs1KEp06pf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1797598793cfebbd40bd39ce2595e17f_JaffaCakes118
Files
-
1797598793cfebbd40bd39ce2595e17f_JaffaCakes118.exe windows:4 windows x86 arch:x86
84e53a2a8682c849be1a93e45acbd432
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersionExA
VirtualFree
GetStartupInfoA
GetModuleHandleA
GlobalSize
FindClose
LoadLibraryA
GetProcAddress
lstrcpynW
GetSystemInfo
VirtualAlloc
VirtualAllocEx
ReadFile
RtlUnwind
FlushFileBuffers
SetStdHandle
CreateFileA
CloseHandle
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
HeapSize
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
FindNextFileW
SetUnhandledExceptionFilter
FormatMessageW
ExpandEnvironmentStringsW
Sleep
CreateDirectoryW
CreateFileW
CompareStringA
LocalUnlock
SetEndOfFile
CreateMutexW
EnumSystemLocalesA
LoadResource
TlsSetValue
WriteConsoleA
GetLocaleInfoW
TlsAlloc
SetEnvironmentVariableA
GetDateFormatA
GetVersionExW
GetCommandLineA
GetConsoleOutputCP
user32
OpenClipboard
SetCapture
DeferWindowPos
DrawEdge
CheckMenuItem
MapWindowPoints
GetKeyboardState
SetMenuItemInfoW
MoveWindow
CreatePopupMenu
InsertMenuW
RemoveMenu
GetMenu
LoadStringW
GetMenuState
DestroyIcon
SetWindowPlacement
BeginPaint
CreateAcceleratorTableW
ScreenToClient
SetWindowLongA
TrackPopupMenu
SetFocus
GetScrollRange
DrawIcon
SetForegroundWindow
IsClipboardFormatAvailable
DestroyMenu
DestroyCursor
CharLowerW
ShowCaret
SetMenu
DestroyWindow
MonitorFromWindow
GetActiveWindow
PostMessageW
DragDetect
CheckMenuRadioItem
gdi32
StartPage
CreateFontIndirectW
DeleteObject
GetStockObject
SetTextColor
CreateSolidBrush
GetTextExtentPoint32W
EndDoc
ExtTextOutW
RemoveFontResourceW
GetPixel
SetWindowOrgEx
Rectangle
GetObjectW
CreateBitmap
LineTo
CreatePen
SetBkColor
SelectObject
SetBkMode
MoveToEx
SetROP2
DeleteDC
SetTextAlign
AddFontResourceW
comdlg32
GetFileTitleA
ChooseFontW
ReplaceTextW
ChooseColorW
GetSaveFileNameW
PrintDlgW
PageSetupDlgA
FindTextW
PrintDlgA
GetFileTitleW
GetOpenFileNameA
FindTextA
PageSetupDlgW
ReplaceTextA
ChooseColorA
ChooseFontA
advapi32
RegCreateKeyExW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegEnumKeyExW
RegQueryInfoKeyA
RegOpenKeyExW
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyW
RegCreateKeyW
RegFlushKey
RegSetValueExW
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ