Static task
static1
Behavioral task
behavioral1
Sample
7fffcd31ef0c8a820ab3af00ab2ad2fe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7fffcd31ef0c8a820ab3af00ab2ad2fe_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7fffcd31ef0c8a820ab3af00ab2ad2fe_JaffaCakes118
-
Size
254KB
-
MD5
7fffcd31ef0c8a820ab3af00ab2ad2fe
-
SHA1
2c698be9f82e4c63bde684c47074aad150d2a4df
-
SHA256
da47a40cb542b7425ac552d041a7d0edf5c5f28d9787e1c486bfdfb249d1879c
-
SHA512
8f998e1b67ad665d9f0c6092f21bc1de638032e8b8575b216e500dcb9f34a642dc85cc025b0e0c8d737175168e66469db97afdb33c3d690b5d6bd7816584deed
-
SSDEEP
6144:kujX7M9HYaxTHN9/kGAYFLAwxUgRqW7S6yB1a:kALM9HXZdAgPCgRqWCTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7fffcd31ef0c8a820ab3af00ab2ad2fe_JaffaCakes118
Files
-
7fffcd31ef0c8a820ab3af00ab2ad2fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b8edbfabf1249968aaa872e11853bf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
SetComputerNameW
GetFileAttributesA
BeginUpdateResourceW
GetLocaleInfoA
CreateDirectoryA
lstrlen
LoadLibraryExA
GetExpandedNameW
GetNumberFormatA
lstrcmpi
ExpandEnvironmentStringsA
OpenSemaphoreW
GetLocaleInfoW
lstrcpyW
OpenEventW
FindResourceA
user32
CharPrevA
LoadCursorW
GetMenuStringW
GetDCEx
RegisterClassExW
PeekMessageW
LoadMenuW
DefWindowProcW
SendDlgItemMessageA
CopyIcon
GetMessageW
CreateDialogParamA
GetScrollPos
GetMenuItemInfoW
GetClassInfoExA
DialogBoxParamA
AppendMenuW
UnregisterClassW
CharUpperA
ShowCaret
DialogBoxIndirectParamA
EnableMenuItem
SetWindowRgn
LoadBitmapW
GetDlgItemTextA
LoadMenuIndirectW
OffsetRect
IsMenu
MessageBoxA
CreateDialogIndirectParamW
GetMenuState
DialogBoxIndirectParamW
RegisterClassExA
GetCapture
SetMenu
SendDlgItemMessageW
MessageBoxIndirectA
IsChild
EndDialog
GetCapture
MessageBoxIndirectW
CreatePopupMenu
ShowCursor
GetMenuItemInfoA
CreateWindowExA
GetSystemMetrics
IsIconic
WaitForInputIdle
GetMenuStringA
AppendMenuA
CreateAcceleratorTableA
EndMenu
gdi32
CreateDIBPatternBrush
CreateRectRgn
CreateICA
CreateDIBSection
CreateColorSpaceW
SetMetaFileBitsEx
GetEnhMetaFilePixelFormat
CreateFontIndirectExA
ExtCreateRegion
AddFontResourceW
CreateBrushIndirect
CreatePalette
CreateFontIndirectW
SetWinMetaFileBits
AddFontResourceA
GetRasterizerCaps
GetEnhMetaFileA
CreateCompatibleDC
RemoveFontResourceA
advapi32
RegOpenKeyW
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegSetValueW
RegCreateKeyExA
shell32
StrCmpNW
Shell_NotifyIconW
StrRStrW
shlwapi
SHGetValueW
PathAppendW
PathBuildRootW
PathFindFileNameA
StrFromTimeIntervalA
PathIsContentTypeW
UrlGetLocationA
DllGetVersion
StrRetToBSTR
ole32
CoGetObject
IsValidIid
CoLockObjectExternal
CoUninitialize
CoInitialize
CoGetCallerTID
CoFileTimeNow
CoCreateGuid
OleCreateEx
oleaut32
VarOr
SysAllocStringLen
VarI1FromStr
LoadRegTypeLib
VarUI4FromDisp
VarDecAdd
VarDecFromUI1
version
VerFindFileA
VerInstallFileA
GetFileVersionInfoA
GetFileVersionInfoSizeW
VerQueryValueA
VerFindFileW
VerQueryValueW
ws2_32
WSASendTo
recvfrom
getsockopt
closesocket
WSAEnumNetworkEvents
WSAEnumProtocolsW
WSAAccept
gethostname
listen
inetcomm
MimeOleSMimeCapGetHashAlg
MimeOleGetFileInfo
MimeOleGenerateCID
MimeEditCreateMimeDocument
EssReceiptEncodeEx
sqlunirl
_wvsprintf_@12
_CreateNamedPipe_@32
_NDdeIsValidAppTopicList_@4
Sections
.z Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tIk Size: 3KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fZuaw Size: 1KB - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dNrt Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zGEA Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zgK Size: 3KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.E Size: 4KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ialxd Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QKkDoi Size: 13KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Su Size: 4KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ