Static task
static1
Behavioral task
behavioral1
Sample
5631e44127e3543e653a80e0f5730b82_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5631e44127e3543e653a80e0f5730b82_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5631e44127e3543e653a80e0f5730b82_JaffaCakes118
-
Size
630KB
-
MD5
5631e44127e3543e653a80e0f5730b82
-
SHA1
0bc2ccd74704a304293dfc7969e40eff9ab2ec87
-
SHA256
1534e2b24da451cc8b2446de0748f923057c5950e9f08736583364b916299f05
-
SHA512
8e7702076ec2e0cc43d13246f7066148edd7b5eda28c7c659863dc665ef59e9a4e650c365ee2f92a5d4df6059b6b4e574a14f7b85b5709be1710b22299f98113
-
SSDEEP
12288:i+UdqTSKnzMwBHkKjpsz2NSCmrO1JlU74BNtZxSrfOeK2FTA:i+UdqTSKnQwBHkye6SCIO1JWsNNSrfpL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5631e44127e3543e653a80e0f5730b82_JaffaCakes118
Files
-
5631e44127e3543e653a80e0f5730b82_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ab99556082e7eec693e82c7c40a40d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetWorldTransform
CreateSolidBrush
SetLayout
LineTo
MaskBlt
PaintRgn
SetBrushOrgEx
CreateBrushIndirect
SetWinMetaFileBits
GetCurrentObject
StretchDIBits
GetTextExtentPointW
shell32
SHInvokePrinterCommandA
RealShellExecuteA
user32
RegisterClassA
SendIMEMessageExW
DrawFrame
DdeFreeStringHandle
RegisterClassExA
comdlg32
GetFileTitleA
PageSetupDlgA
PrintDlgA
kernel32
GetStringTypeA
VirtualAlloc
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
GetEnvironmentStrings
GetTimeZoneInformation
InterlockedExchange
GetLastError
GetOEMCP
GetCurrentProcessId
InterlockedIncrement
GetStartupInfoA
SetHandleCount
FreeLibrary
CreateFileA
EnumTimeFormatsW
GetCurrentProcess
IsDebuggerPresent
lstrcmpiW
lstrcpyn
EnterCriticalSection
CreateMutexA
SetFilePointer
HeapReAlloc
GlobalAddAtomW
InterlockedDecrement
GetProcAddress
FreeEnvironmentStringsW
MultiByteToWideChar
TlsSetValue
HeapDestroy
CreateRemoteThread
Sleep
LoadLibraryA
GetSystemTime
SetTimeZoneInformation
TlsFree
FreeEnvironmentStringsA
LockResource
WriteConsoleA
CreateFileMappingW
ReadFile
GetNumberFormatW
GetModuleFileNameA
GetTimeFormatA
TlsAlloc
PulseEvent
VirtualQuery
GetTickCount
RtlZeroMemory
GetConsoleCP
FlushFileBuffers
GetCurrentThread
EnumSystemLocalesA
GetProcessHeap
TlsGetValue
GetCPInfo
DeleteCriticalSection
IsValidLocale
SetEnvironmentVariableA
LeaveCriticalSection
RtlUnwind
RemoveDirectoryW
GetVersionExA
GetWindowsDirectoryW
LCMapStringW
CreateToolhelp32Snapshot
GetDateFormatA
HeapSize
CompareStringA
OpenMutexA
GetStdHandle
WideCharToMultiByte
WriteConsoleW
SetLastError
VirtualFree
UnhandledExceptionFilter
InitializeCriticalSection
GetLocaleInfoA
OpenSemaphoreA
HeapFree
HeapAlloc
SetConsoleActiveScreenBuffer
CloseHandle
LCMapStringA
GetACP
WriteFile
GetCommandLineA
TerminateProcess
GetFileType
HeapCreate
GlobalFindAtomW
GetUserDefaultLCID
GetModuleHandleA
GetConsoleOutputCP
QueryPerformanceCounter
GetVolumeInformationW
GetEnvironmentStringsW
CompareStringW
GetLocaleInfoW
GetProfileIntA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetConsoleMode
SetStdHandle
GetStringTypeW
ExitProcess
IsValidCodePage
comctl32
InitCommonControlsEx
Sections
.text Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ