Static task
static1
Behavioral task
behavioral1
Sample
538bb92811d7d198da18f524df080832_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
538bb92811d7d198da18f524df080832_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
538bb92811d7d198da18f524df080832_JaffaCakes118
-
Size
174KB
-
MD5
538bb92811d7d198da18f524df080832
-
SHA1
63f6b467c6b2a6344b864b6b79e9dd18332a9433
-
SHA256
6f2c5a620d6e1640c0f3d5f97f0890c27bd2b07f70c3c9676f23493758fd28fe
-
SHA512
d89c686d1efe783b0e60bcfdc0efd63ce73e1a978307fd98508091acddb17547fd459aea9005519c7ac1cc41e0fac8a3b5b3c4b5df5346c146712db2554d2fa6
-
SSDEEP
3072:2nz8BvA6HaggAbKvlf7Hwk2bPNkuSbzwslvvSjdDeJvIT9cHV2warOIIZMjd:gzkZmjf7Hwk2LxvjqQmHV2wZKj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 538bb92811d7d198da18f524df080832_JaffaCakes118
Files
-
538bb92811d7d198da18f524df080832_JaffaCakes118.exe windows:4 windows x86 arch:x86
653aba4558ffc4e69ee4d9eccafcf792
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
user32
DestroyWindow
RegisterClassExW
DispatchMessageW
GetWindowTextLengthW
SetDlgItemTextW
GetDlgItemTextW
GetParent
BeginPaint
SetWindowTextW
GetClassInfoExW
SetWindowPos
CreateWindowExW
GetClientRect
PeekMessageW
EndPaint
TranslateMessage
SetCapture
GetWindowInfo
GetDC
MapWindowPoints
GetWindow
LoadCursorW
MessageBoxW
SystemParametersInfoW
GetDlgItem
GetWindowRect
EndDialog
kernel32
CreateSemaphoreW
FreeLibrary
GetProcAddress
TlsSetValue
GetCurrentProcessId
RtlUnwind
GetCommandLineW
MulDiv
QueryPerformanceCounter
TlsGetValue
InterlockedExchange
GetVersionExA
TlsAlloc
WriteConsoleInputVDMA
GetCurrentThreadId
LoadLibraryExW
GetOEMCP
HeapSize
GetConsoleMode
VirtualAlloc
CopyFileW
GetCurrentProcess
SetLastError
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetFileSize
WriteConsoleW
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
CreateFileMappingW
GetLocaleInfoA
TlsFree
GetProcessHandleCount
GetVersion
LocalAlloc
CreateFileW
GetEnvironmentStrings
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
FindResourceW
UnhandledExceptionFilter
LoadLibraryW
SetStdHandle
EnumResourceNamesA
GetLastError
lstrcmpA
GetModuleFileNameW
SizeofResource
GetVersionExW
InterlockedIncrement
SetFilePointer
GetEnvironmentStringsW
GetStartupInfoW
GetConsoleOutputCP
FlushFileBuffers
Sleep
GetSystemDirectoryW
GetCPInfo
GetFileAttributesW
GetStringTypeW
ExitProcess
IsDebuggerPresent
GetTickCount
GetStdHandle
LoadLibraryA
GetProcessHeap
lstrcmpiW
FreeEnvironmentStringsW
CreateFileA
ReadFile
LoadResource
GetThreadLocale
IsProcessorFeaturePresent
GetDriveTypeW
GetModuleHandleA
HeapAlloc
HeapDestroy
HeapFree
RaiseException
SetHandleCount
FreeEnvironmentStringsA
LCMapStringW
FlushInstructionCache
GetFileType
LocalFree
GetStringTypeA
WriteFile
LCMapStringA
InterlockedCompareExchange
VirtualFree
GetStartupInfoA
HeapReAlloc
GetModuleHandleW
WriteConsoleA
WritePrivateProfileSectionW
WaitForSingleObject
CreateProcessW
HeapCreate
GetCommandLineA
InitializeCriticalSection
GetACP
DeleteFileW
LockResource
InterlockedDecrement
GetConsoleCP
lstrlenW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ