Static task
static1
Behavioral task
behavioral1
Sample
3f363acf5f382c9230696bf013e0f9a9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f363acf5f382c9230696bf013e0f9a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3f363acf5f382c9230696bf013e0f9a9_JaffaCakes118
-
Size
22KB
-
MD5
3f363acf5f382c9230696bf013e0f9a9
-
SHA1
47ae8896337bed759a2253dfe3eed481a0fcc97e
-
SHA256
77a8454db768dc2a3a955608843b6ca44a8186db9c769fdc7d46a4e48027280e
-
SHA512
d4a79108e51e7ada2923d7862e2c3dae8f11d2c8b22f18a43a9f27af57cd4b0cc893b1c010fddd81f9eeedc192b98179a09b68fd1f70376735caafdddbf9339c
-
SSDEEP
384:BFqKO7msAGdmy2AobReD04AbGKGXoW6Ftdev33zAgwN8F0:BFbO4GAy2AoNo0Xbuuw5Q8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f363acf5f382c9230696bf013e0f9a9_JaffaCakes118
Files
-
3f363acf5f382c9230696bf013e0f9a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
dcab0b53f914f85fca4efb11a7440687
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExA
GetCommandLineA
SetVolumeMountPointA
HeapQueryInformation
GetProcessHeaps
GetVolumeNameForVolumeMountPointA
GetLocaleInfoA
ExpungeConsoleCommandHistoryA
ReleaseMutex
SetHandleContext
ShowConsoleCursor
MoveFileWithProgressA
GetConsoleCursorMode
OpenWaitableTimerA
GetLocalTime
GetComputerNameA
GlobalWire
ResetEvent
FillConsoleOutputCharacterA
lstrcpy
EnumResourceNamesA
FlushConsoleInputBuffer
GetConsoleTitleA
GetConsoleMode
LocalAlloc
GetDllDirectoryA
WriteConsoleOutputCharacterW
Module32Next
GetThreadPriorityBoost
AddConsoleAliasA
DisableThreadLibraryCalls
FindFirstChangeNotificationA
ReadConsoleA
FindVolumeClose
PeekConsoleInputA
GetConsoleAliasExesW
GetFileAttributesExA
DuplicateConsoleHandle
SetConsoleNumberOfCommandsA
ClearCommError
SetConsoleInputExeNameA
AddAtomA
CreateSemaphoreA
GetProcessShutdownParameters
GetCommTimeouts
VirtualQueryEx
GetDiskFreeSpaceA
GetCurrentConsoleFont
GetFileAttributesA
GetConsoleInputExeNameA
WriteProcessMemory
GetSystemDefaultLangID
GetModuleFileNameA
HeapAlloc
GetWindowsDirectoryA
LZClose
GetFileInformationByHandle
VirtualProtect
OpenFileMappingA
FormatMessageA
FlushViewOfFile
VirtualAllocEx
GetWriteWatch
TransmitCommChar
MoveFileExW
CopyFileExA
GetDevicePowerState
HeapSummary
GetCommModemStatus
IsValidCodePage
Heap32First
GetEnvironmentStringsA
GetVolumePathNamesForVolumeNameA
GetModuleHandleA
GetConsoleAliasesLengthA
SetDefaultCommConfigA
FreeConsole
ReleaseSemaphore
OpenThread
GetShortPathNameA
lstrcpynA
GetProcessId
VirtualAlloc
Process32Next
GetPrivateProfileStructA
GetCPInfoExA
LockFile
HeapWalk
GetThreadPriority
GetProcessHeap
FindNextVolumeMountPointW
GetDateFormatA
CompareStringA
GetFileSize
GetDriveTypeA
GetThreadIOPendingFlag
UnregisterWaitEx
TerminateThread
GetSystemWindowsDirectoryA
OpenJobObjectA
GetFileTime
LZCopy
GlobalMemoryStatusEx
GetThreadContext
user32
CreateDialogParamA
InflateRect
CreateMDIWindowA
DestroyCursor
ShowOwnedPopups
PrivateExtractIconExA
GetWindowInfo
GetSystemMenu
MoveWindow
EnumDesktopWindows
CreateIconIndirect
SetMenu
MessageBoxTimeoutA
GetRawInputData
RegisterClassExW
AttachThreadInput
UnpackDDElParam
BroadcastSystemMessageExA
DestroyIcon
GetForegroundWindow
MessageBoxExA
GetWindowRgn
SetDoubleClickTime
FindWindowExA
LoadCursorFromFileA
FindWindowA
RealGetWindowClassA
SetSysColorsTemp
InSendMessageEx
AlignRects
CharUpperBuffW
GetParent
GetClipCursor
InvertRect
IsHungAppWindow
DefFrameProcA
UnregisterHotKey
CharUpperBuffW
NotifyWinEvent
AttachThreadInput
EnumWindows
OpenDesktopA
SetThreadDesktop
SetSystemCursor
ClientThreadSetup
GetTaskmanWindow
MessageBoxExA
CloseClipboard
IsCharAlphaA
SetMessageQueue
GetUpdateRgn
GetUserObjectInformationA
ReuseDDElParam
PeekMessageA
IsWindowVisible
GetRawInputDeviceList
OemKeyScan
DestroyWindow
RealGetWindowClassA
CreateWindowStationA
GetMenuBarInfo
SetWindowWord
MapVirtualKeyA
SwitchToThisWindow
GetIconInfo
GetWindowLongA
GetNextDlgTabItem
CharLowerBuffW
DialogBoxParamA
PrivateExtractIconExA
PostMessageA
SendMessageA
SetWindowStationUser
GetKeyNameTextA
GetCaretPos
EnumDisplaySettingsA
SendMessageTimeoutA
CloseWindow
GetPropA
RealGetWindowClassA
MessageBeep
GetScrollBarInfo
ChangeMenuA
SetWinEventHook
SendMessageTimeoutA
ClipCursor
GetMenuItemInfoA
UnionRect
DrawCaptionTempA
IsCharAlphaNumericA
EndDeferWindowPos
GetWindowLongA
DrawIconEx
AdjustWindowRect
RegisterHotKey
TileChildWindows
EnumClipboardFormats
DestroyIcon
DefDlgProcA
CharToOemBuffA
SetWindowPlacement
ShowWindow
dhcpsapi
DhcpEnumServers
d3d8
DebugSetMute
CheckFullscreen
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE