Static task
static1
Behavioral task
behavioral1
Sample
6b1347913b44a81f9053bc4f99bbab0e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6b1347913b44a81f9053bc4f99bbab0e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
6b1347913b44a81f9053bc4f99bbab0e_JaffaCakes118
-
Size
99KB
-
MD5
6b1347913b44a81f9053bc4f99bbab0e
-
SHA1
2cdea26df10a6e0078ebd12570fd111091f84bb7
-
SHA256
f4c0661dcce50dc3c75d4f43e96f63b77f36819dffb7f62ee99f81404ea7ea83
-
SHA512
33da88541d351bd7ae4d8048ac135540a8eaedc49cee61b7883af9589be5cd496e18db8f00719d054e9dffa343c2e5b171889bc2635ea693289aa5e28824cede
-
SSDEEP
3072:mge1O73/dpWaGn+ZPLQt9ynFHMjo0MUn:m+z9I+dQ/+FHMo+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b1347913b44a81f9053bc4f99bbab0e_JaffaCakes118
Files
-
6b1347913b44a81f9053bc4f99bbab0e_JaffaCakes118.exe windows:5 windows x86 arch:x86
29b8e9ff41dd0e41955439bb431b9c00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CARemoveCACertificateType
CASetCertTypeKeySpec
CASetCertTypeExtension
CAGetCertTypeKeySpec
CAFreeCertTypeExtensions
CAGetCertTypeFlags
CACertTypeGetSecurity
CAEnumCertTypesForCA
CAFreeCAProperty
CAFreeCertTypeProperty
CACloseCA
CAEnumCertTypes
CAEnumNextCertType
CAGetCertTypeProperty
CACertTypeSetSecurity
CAGetCertTypePropertyEx
CAUpdateCertType
CASetCertTypeProperty
CAAddCACertificateType
CACloseCertType
CAFindCertTypeByName
CAGetCAProperty
CACreateCertType
CAUpdateCA
CAFindByName
CASetCertTypeFlags
CAGetCertTypeExtensions
kernel32
OutputDebugStringW
OutputDebugStringA
InterlockedDecrement
WideCharToMultiByte
FileTimeToLocalFileTime
InitializeCriticalSection
IsBadReadPtr
GetLastError
SetUnhandledExceptionFilter
LocalFree
lstrcpyW
GetComputerNameW
GlobalLock
GlobalFree
LoadLibraryW
GetModuleFileNameW
CloseHandle
FileTimeToSystemTime
lstrcmpiW
DeleteCriticalSection
FormatMessageW
GetCurrentProcess
GlobalAlloc
GetSystemWindowsDirectoryW
SetLastError
RemoveDirectoryA
GetTickCount
InterlockedIncrement
GetModuleHandleA
QueryPerformanceCounter
CreateFileW
GetSystemTimeAsFileTime
LocalReAlloc
GetEnvironmentStringsW
lstrlenW
GlobalUnlock
GetStartupInfoA
GetDateFormatW
GetACP
GetSystemDefaultLangID
user32
SetCursor
SetFocus
LoadIconW
GetParent
EndDialog
EnableWindow
DialogBoxParamW
SetDlgItemTextW
wsprintfW
LoadStringW
InsertMenuItemW
GetDC
ReleaseDC
SystemParametersInfoW
SetWindowTextW
WinHelpW
RegisterClipboardFormatW
LoadImageW
LoadBitmapW
GetDlgItemTextA
SendDlgItemMessageW
SendMessageW
SetWindowLongW
GetWindowLongW
MessageBoxW
GetDlgItem
PostMessageW
LoadCursorW
advapi32
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
comctl32
PropertySheetW
CreatePropertySheetPageW
msvcrt
vswprintf
__dllonexit
_adjust_fdiv
wcsrchr
mbstowcs
wcscpy
wcschr
wcslen
free
__RTDynamicCast
_initterm
wcstoul
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_wcsicmp
wcsstr
memmove
malloc
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
_purecall
_onexit
wcscat
_wcsupr
_except_handler3
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ