Static task
static1
Behavioral task
behavioral1
Sample
273ca897994397bea6b02708626bbf57_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
273ca897994397bea6b02708626bbf57_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
273ca897994397bea6b02708626bbf57_JaffaCakes118
-
Size
172KB
-
MD5
273ca897994397bea6b02708626bbf57
-
SHA1
3ebf22376a959919fd9e12eace739f706277c8f4
-
SHA256
8644db6a930c806f497901b9e938f2e8b1b833199fb6369928321ba788634ff1
-
SHA512
93a5f9c2b70dc1a992ca6d6f64b0e982c8a79d826cc9ef1f1be2dc743434862625dd85408f2423ebb95088c56c4267024f7ad806720d4d00211cfafccd5531f0
-
SSDEEP
3072:ULH1c0w3KvChjkRnFUK3u+3iuuttYQ/nTMp0:ULH07jWnFU1uSYQvTMu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 273ca897994397bea6b02708626bbf57_JaffaCakes118
Files
-
273ca897994397bea6b02708626bbf57_JaffaCakes118.exe windows:4 windows x86 arch:x86
39e8b2aae8c7008400d08819076e73d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
kernel32
FreeLibrary
lstrcmpiW
LoadLibraryExW
GetModuleHandleW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
Sleep
lstrcpyA
ResetEvent
WaitForSingleObject
GetTickCount
GetCurrentThreadId
CreateThread
GetLocalTime
SystemTimeToFileTime
CompareFileTime
FileTimeToSystemTime
DeleteFileA
GlobalAddAtomA
GetModuleFileNameA
GetProcessHeap
lstrcatA
CreateEventA
ExitProcess
GetCommandLineA
GlobalFindAtomA
CloseHandle
RaiseException
LeaveCriticalSection
lstrlenW
GetModuleFileNameW
EnterCriticalSection
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
HeapFree
HeapAlloc
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
SetEvent
MultiByteToWideChar
SetEndOfFile
CreateFileW
lstrlenA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
LoadLibraryA
GetOEMCP
GetCPInfo
HeapDestroy
HeapReAlloc
HeapSize
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetStartupInfoA
HeapCreate
VirtualFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
user32
UnregisterClassA
GetForegroundWindow
SetForegroundWindow
CharNextW
wsprintfA
FindWindowExA
PostMessageW
DispatchMessageW
GetMessageW
PostThreadMessageW
EnumChildWindows
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoTaskMemFree
oleaut32
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen
shlwapi
StrStrIA
StrCmpNA
PathRemoveExtensionA
PathFindFileNameA
UrlIsA
StrCmpIW
StrStrIW
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE