Static task
static1
Behavioral task
behavioral1
Sample
55546784222e07de7fce5b3c9bdd5f15_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55546784222e07de7fce5b3c9bdd5f15_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55546784222e07de7fce5b3c9bdd5f15_JaffaCakes118
-
Size
408KB
-
MD5
55546784222e07de7fce5b3c9bdd5f15
-
SHA1
213cf6f61f1f12187c277b0828d59d25b262c296
-
SHA256
07bac5925bfb54db6d497856b6472a84fc19abb62aa00b1cdfd487ce198d8528
-
SHA512
b7057569758b12a4ea171aa0dd6ee79cd3521478733d43c71560f85525eafaad0d343071c7b23547dea6eb17ba9b5df9c6649f4142a78b8c02fafc28b728a115
-
SSDEEP
12288:RUbjvkW7iZeXkirZTpDNrq04zqyf/A2v:aoqr55NFcf42
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55546784222e07de7fce5b3c9bdd5f15_JaffaCakes118
Files
-
55546784222e07de7fce5b3c9bdd5f15_JaffaCakes118.exe windows:4 windows x86 arch:x86
50fa95e5543ced66cb021ad4f5d694f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
WriteFile
IsDBCSLeadByte
GetCurrentProcess
lstrlenA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
LoadLibraryA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetSystemInfo
FormatMessageA
GetVersionExW
LoadLibraryExA
GetCPInfo
MultiByteToWideChar
GetVersionExA
InterlockedIncrement
RaiseException
LoadLibraryW
GetTimeZoneInformation
GetLocalTime
GlobalFree
GetComputerNameExW
LocalReAlloc
LocalAlloc
GetTickCount
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
lstrcmpiW
GetModuleHandleW
GetProcAddress
lstrlenW
InterlockedExchange
Sleep
InterlockedCompareExchange
OutputDebugStringA
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
LocalFree
CloseHandle
CreateDirectoryW
CreateFileW
CopyFileW
GetCommandLineA
HeapSize
VirtualProtect
GetStdHandle
ExitProcess
VirtualQuery
GetStartupInfoA
RtlUnwind
user32
GetWindowRect
CharNextW
LoadStringW
ReleaseDC
GetDC
UnregisterClassA
SendMessageTimeoutA
DefWindowProcA
ShowWindow
LoadStringA
MessageBoxA
ExitWindowsEx
CharNextA
SendMessageA
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
GetDesktopWindow
DestroyWindow
InvalidateRect
CreateDialogParamW
SetWindowLongW
GetWindowLongW
wsprintfW
RegisterClassA
CreateWindowExA
advapi32
RegDeleteKeyA
RegEnumValueW
RegEnumKeyW
ConvertStringSidToSidW
SetSecurityInfo
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RevertToSelf
LsaOpenPolicy
RegQueryInfoKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyA
RegEnumValueA
RegCloseKey
RegFlushKey
RegDeleteValueA
RegOpenKeyExA
LsaQueryInformationPolicy
LsaClose
LsaFreeMemory
gdi32
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
SelectObject
SetTextColor
ExtTextOutA
SetBkColor
GetTextMetricsA
GetSystemPaletteEntries
GetDeviceCaps
GetTextColor
DeleteObject
ole32
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemFree
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 631KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ