Static task
static1
Behavioral task
behavioral1
Sample
26eb07efa3ecc0b05deb6e0bb7cf8291_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26eb07efa3ecc0b05deb6e0bb7cf8291_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26eb07efa3ecc0b05deb6e0bb7cf8291_JaffaCakes118
-
Size
734KB
-
MD5
26eb07efa3ecc0b05deb6e0bb7cf8291
-
SHA1
82f43c80ffc14e10d90ea5c8248575634e213912
-
SHA256
abeed98095409ea417029abcf5be923b22f1f88fed80ffbd923dbde63f41833d
-
SHA512
73cb01a63f04b54c213adb199869f3320d96792c2ae0e73a8c515bb1c0d571d5c5a96ed95797e3bd62d27943cf8c1f69d334ff9eaa1ea9f055428dbbcec525a0
-
SSDEEP
12288:x6mFmhlQ4YB1fkdPEyXeGffYx4MuHX4lPMjsPRxW0ihOm9J4i9m7PoVU7doB8MVi:xLD8sGfQKjIlpPn7m9H9m9TMVi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26eb07efa3ecc0b05deb6e0bb7cf8291_JaffaCakes118
Files
-
26eb07efa3ecc0b05deb6e0bb7cf8291_JaffaCakes118.exe windows:5 windows x86 arch:x86
00dbc3d699c708e3afe7484eeba2e3cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileW
kernel32
GetStartupInfoW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
MoveFileExW
MoveFileW
LocalFree
GetCurrentThreadId
DeleteCriticalSection
RaiseException
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
InitializeCriticalSection
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
FlushInstructionCache
GetCurrentProcess
GetVersionExW
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
lstrcmpW
MulDiv
GlobalFree
GlobalHandle
SetEvent
CreateEventW
TerminateThread
GetExitCodeThread
SetEndOfFile
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
FindClose
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointer
ReadFile
GetStartupInfoA
GetFileType
SizeofResource
HeapCreate
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetModuleHandleA
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
lstrlenA
GetCPInfo
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
FormatMessageA
FindFirstFileW
FindNextFileW
RemoveDirectoryW
GetModuleHandleW
GetTempPathW
GetFileAttributesW
CreateProcessW
IsBadWritePtr
FindResourceExW
LoadResource
GetUserDefaultLCID
LockResource
FindResourceW
WriteFile
GetLastError
CreateFileW
CloseHandle
DeleteFileW
GetTickCount
lstrlenW
SetLastError
GetACP
FormatMessageW
CreateFileA
GetFileAttributesExW
Sleep
FreeResource
GetProcAddress
LoadLibraryW
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
SetHandleCount
GetStringTypeW
HeapSize
InterlockedExchange
user32
GetDlgItem
SetTimer
SetWindowTextW
SetWindowPos
MapWindowPoints
GetClientRect
SendMessageW
MonitorFromWindow
GetWindowLongW
GetWindowRect
GetWindow
GetParent
SetWindowLongW
MessageBoxW
DefWindowProcW
DestroyWindow
CharNextW
EndDialog
wsprintfW
UnregisterClassA
ScreenToClient
MoveWindow
GetSystemMetrics
GetMonitorInfoW
EndPaint
DialogBoxIndirectParamW
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
ClientToScreen
CreateAcceleratorTableW
GetDC
ReleaseDC
GetDesktopWindow
GetClassNameW
RedrawWindow
BeginPaint
FillRect
ShowWindow
IsChild
SetFocus
GetFocus
GetSysColor
DestroyAcceleratorTable
GetWindowTextLengthW
GetWindowTextW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
SetWindowContextHelpId
CallWindowProcW
MapDialogRect
PostThreadMessageW
IsDialogMessageW
DialogBoxParamW
GetActiveWindow
IsWindow
KillTimer
CreateWindowExW
IsWindowVisible
LoadImageW
gdi32
GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateFontIndirectW
GetObjectW
GetStockObject
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
shell32
FindExecutableW
CommandLineToArgvW
ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
ole32
CLSIDFromProgID
OleInitialize
StringFromGUID2
OleLockRunning
OleUninitialize
CoTaskMemRealloc
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CLSIDFromString
CoUninitialize
CoTaskMemFree
oleaut32
SysStringLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantCopy
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
VarUI4FromStr
VariantInit
VariantChangeType
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
shlwapi
PathIsURLW
comctl32
InitCommonControlsEx
gdiplus
GdiplusShutdown
GdiplusStartup
wininet
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 401KB - Virtual size: 401KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ