Static task
static1
Behavioral task
behavioral1
Sample
4598acec2cc7e03909761a53d94fb2e8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4598acec2cc7e03909761a53d94fb2e8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4598acec2cc7e03909761a53d94fb2e8_JaffaCakes118
-
Size
138KB
-
MD5
4598acec2cc7e03909761a53d94fb2e8
-
SHA1
fcebc55d8cb6f90225dbcd9c903e6a7702faf4c6
-
SHA256
a5cc03d9879a9c41db3d46ad9f95594ea032261960562c7d8b6c7bd486b5f659
-
SHA512
1dd8e93d5d7724e77fef19ede9639dc7d3dc4489d9212aa92d2d418749fcd36a02c7f14227079ef469e24776cbb98d4bc07c6678c53c3c30688432334cb17c8f
-
SSDEEP
3072:XVdFrdrMowbRRzlROIv4tfDIGuhZiPoGbaaWTS3:ldFG1Rt4tqhYPaaQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4598acec2cc7e03909761a53d94fb2e8_JaffaCakes118
Files
-
4598acec2cc7e03909761a53d94fb2e8_JaffaCakes118.exe windows:5 windows x86 arch:x86
6b28ebaaa036d37e51d44a76ce3f2635
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawEdge
GetKeyboardLayoutList
GetMessagePos
PostMessageW
ClipCursor
CallWindowProcA
GetParent
IsWindowVisible
DrawFocusRect
CharUpperA
GetKeyState
LoadStringA
SetCursor
LockWindowUpdate
UpdateWindow
MapVirtualKeyW
BringWindowToTop
DeferWindowPos
SetMenuItemInfoA
CreateIcon
EnableMenuItem
PeekMessageA
IsChild
FrameRect
EmptyClipboard
SetScrollPos
ToAscii
FillRect
NotifyWinEvent
GetCaretPos
SetTimer
RemoveMenu
GetKeyboardLayout
MoveWindow
GetCursor
GetMenuItemInfoA
OemToCharA
MapVirtualKeyA
GetFocus
TrackPopupMenu
UnpackDDElParam
GetUpdateRect
DestroyIcon
LoadBitmapA
EnableScrollBar
gdi32
StartDocA
ExtTextOutA
CreatePen
CreateHalftonePalette
GetEnhMetaFileBits
GetPaletteEntries
CreateCompatibleBitmap
GetDeviceCaps
CreateSolidBrush
EnumFontsA
GetTextMetricsA
CreateCompatibleDC
GdiFlush
CreateFontIndirectA
Polygon
SaveDC
GetNearestPaletteIndex
CreatePatternBrush
StartPage
GetMapMode
GetTextExtentPointA
GetWindowOrgEx
kernel32
GetModuleHandleA
GetStartupInfoA
VirtualQuery
GetStdHandle
lstrlenA
GetWindowsDirectoryA
WaitForMultipleObjects
UnmapViewOfFile
MapViewOfFile
RemoveDirectoryA
GetFileAttributesW
GetSystemTime
GetCurrentThreadId
RtlUnwind
GetStringTypeExA
GlobalAddAtomA
MapViewOfFileEx
LeaveCriticalSection
ExitProcess
GetFileSize
GetCommandLineW
GlobalLock
CloseHandle
FileTimeToDosDateTime
LocalAlloc
lstrlenW
EnterCriticalSection
GetLocalTime
CreateFileMappingA
TerminateProcess
WideCharToMultiByte
TerminateProcess
OpenProcess
comdlg32
GetSaveFileNameA
ChooseFontA
wininet
HttpQueryInfoA
FtpOpenFileA
oleaut32
VariantClear
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetElement
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCreateKeyExA
version
VerQueryValueA
ole32
IsEqualGUID
CoGetClassObject
ProgIDFromCLSID
StringFromGUID2
comctl32
ImageList_Add
dbnesnap
_FXbig
_Nan
_Wcrtomb
_FEps
_LNan
_Stod
_LDtest
_FSinh
Sections
.text Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ