Static task
static1
Behavioral task
behavioral1
Sample
6af46eddf74b665ad43bc898e6f8e1e0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6af46eddf74b665ad43bc898e6f8e1e0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
6af46eddf74b665ad43bc898e6f8e1e0_JaffaCakes118
-
Size
101KB
-
MD5
6af46eddf74b665ad43bc898e6f8e1e0
-
SHA1
9c8e7dec24a9ca4f225d43f8f1e20a683d943218
-
SHA256
3f40da12669d0b0b2ac24dff64eef72d440b88dcb1d0d7e27f61875117425345
-
SHA512
c40489ff5de17ae52eb790964a943982568c422d7f412f357d5c44d0a1b9ce3ec5be994bc24fcefde185b3adc3c168da05174eced8fb1d0a9d375acc2d4123bc
-
SSDEEP
1536:xczLK4IXtIAX1tWs+jE/3umWmST6ebFxX+zaVGMZSYTHc:+zW4IXtIAX1NuEGmWHOaVGsSYbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6af46eddf74b665ad43bc898e6f8e1e0_JaffaCakes118
Files
-
6af46eddf74b665ad43bc898e6f8e1e0_JaffaCakes118.exe windows:5 windows x86 arch:x86
7d945d053dc53d5df4dba2bebf3fbadc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerGetLineControlsW
mixerGetLineInfoW
waveInClose
mixerGetID
waveInGetDevCapsW
waveInAddBuffer
waveInReset
OpenDriver
mixerOpen
waveInOpen
CloseDriver
mixerClose
mixerGetControlDetailsW
waveInStart
waveInPrepareHeader
SendDriverMessage
mixerSetControlDetails
waveInUnprepareHeader
waveInStop
kernel32
CreateIoCompletionPort
WideCharToMultiByte
GetCurrentProcess
GetTickCount
lstrcmpW
DeleteFileW
InterlockedIncrement
GetCurrentThread
GlobalLock
DeleteCriticalSection
GetSystemInfo
InitializeCriticalSection
IsBadCodePtr
CreateSemaphoreW
SetThreadPriority
GetStartupInfoA
lstrcpynW
LeaveCriticalSection
GetDiskFreeSpaceW
ReleaseSemaphore
SetFilePointer
GetVersionExW
WaitForSingleObject
GetThreadPriority
LoadLibraryW
IsBadHugeReadPtr
CloseHandle
WriteFile
GetCPInfo
SetUnhandledExceptionFilter
lstrlenW
GlobalUnlock
WaitForMultipleObjects
IsBadReadPtr
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetEvent
lstrlenA
lstrcpyW
MultiByteToWideChar
GetFullPathNameW
GlobalAlloc
GetModuleFileNameA
GlobalMemoryStatus
lstrcmpiW
GetFileSize
ResetEvent
InterlockedExchange
VirtualFree
GlobalFree
SetEndOfFile
GetFileAttributesW
InterlockedDecrement
EnterCriticalSection
HeapFree
GlobalHandle
GetProfileIntA
HeapAlloc
OutputDebugStringA
GetQueuedCompletionStatus
CreateThread
GetSystemDefaultLangID
CreateFileW
lstrcpyA
GetCurrentProcessId
GetLastError
FreeLibrary
PostQueuedCompletionStatus
ReadFile
IsBadWritePtr
CreateEventW
GetProcessHeap
GetEnvironmentStringsW
MulDiv
GetPrivateProfileStringW
user32
GetDlgItemInt
ClientToScreen
wsprintfW
MoveWindow
LoadStringW
InvalidateRect
CheckDlgButton
EnableWindow
GetAsyncKeyState
SetCursor
TranslateMessage
IsWindowVisible
GetWindowRect
DefWindowProcW
DispatchMessageW
GetClientRect
IsWindow
PeekMessageW
GetDlgItem
LoadCursorW
DestroyWindow
GetWindowLongW
SendMessageW
SetDlgItemTextW
CheckRadioButton
ReleaseDC
IsRectEmpty
GetDC
SetWindowLongW
SetDlgItemInt
CreateDialogParamW
ShowWindow
GetDesktopWindow
advapi32
RegEnumKeyExW
RegCreateKeyW
RegCloseKey
RegSetValueExW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegSetValueW
RegQueryValueExW
msvcrt
_except_handler3
_purecall
wcslen
??2@YAPAXI@Z
_ftol
??3@YAXPAX@Z
ole32
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoUninitialize
gdi32
PatBlt
GetStockObject
GetObjectW
GetPaletteEntries
GetTextExtentPoint32W
SelectObject
msvfw32
ICClose
ICLocate
ICGetInfo
ICCompress
ICOpen
ICDecompress
ICSendMessage
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ