Static task
static1
Behavioral task
behavioral1
Sample
b4c370efce46e7abfec0b147f3118b6e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4c370efce46e7abfec0b147f3118b6e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b4c370efce46e7abfec0b147f3118b6e_JaffaCakes118
-
Size
376KB
-
MD5
b4c370efce46e7abfec0b147f3118b6e
-
SHA1
d08babb7e379e05f24270b005efd42c57834d6f1
-
SHA256
ce70e4c500aa39d8d43b1fc93909894c87b68843420b359f4017bec77292fa7d
-
SHA512
61573d888601dec15e2eae0777df7a15a5205f3af28c44349aa76f29d712f32d287dedb1187ca1121262b1f7715244bb4c31cc3e878728d77a28619a9207b30f
-
SSDEEP
6144:ie3rNhMeYq4CGRTs4kadSoKVStcmTVn57CpSCwsUbg62oXd:iY5hMfqwTsTKcmTV5kINEx+d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b4c370efce46e7abfec0b147f3118b6e_JaffaCakes118
Files
-
b4c370efce46e7abfec0b147f3118b6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f41bd441c83b27ce3391bf736a223a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetServiceKeyNameA
SetServiceStatus
mpr
WNetCancelConnectionA
WNetConnectionDialog
WNetAddConnection3A
WNetAddConnection2A
WNetDisconnectDialog
WNetGetConnectionA
msvcrt
acos
__dllonexit
_onexit
sin
setlocale
atoi
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_setmbcp
kernel32
Module32First
ClearCommBreak
GetStringTypeA
GetThreadTimes
CreateActCtxW
ExitThread
Module32First
ClearCommBreak
GetStringTypeA
GetThreadTimes
CreateActCtxW
ExitThread
gdi32
GetFontData
Chord
ExtCreatePen
GetTextExtentPoint32W
SwapBuffers
CreateSolidBrush
ScaleViewportExtEx
GetROP2
SetTextCharacterExtra
GetKerningPairsA
EnumFontFamiliesA
CreateRectRgn
GetClipBox
GetEnhMetaFileBits
BitBlt
GetStockObject
CreateEllipticRgn
RealizePalette
SetViewportOrgEx
CreatePolygonRgn
Ellipse
CreateICA
ExtCreateRegion
UnrealizeObject
CombineRgn
GetTextColor
CreateICW
RectVisible
SetMetaFileBitsEx
AbortDoc
CreateFontW
ExtEscape
GdiFlush
GetMapMode
OffsetRgn
GetBitmapBits
GetTextFaceA
Pie
SetBitmapBits
StartDocW
GetGlyphOutlineA
GetNearestPaletteIndex
SetColorAdjustment
SetWindowExtEx
EndPath
SetPolyFillMode
user32
GetWindowLongA
CopyIcon
GetCursor
DdeQueryStringA
GetClassNameW
MapVirtualKeyExA
CheckMenuItem
LoadBitmapA
IsIconic
CharPrevW
GetWindowLongW
GetScrollRange
ChangeClipboardChain
ScrollWindowEx
OemToCharBuffA
SetRect
CharUpperA
EnableWindow
RegisterClipboardFormatA
CreateWindowExW
MapVirtualKeyA
SetClipboardData
IsCharAlphaNumericA
UnpackDDElParam
EmptyClipboard
AppendMenuW
InsertMenuW
GetMessageA
RemoveMenu
BeginDeferWindowPos
WindowFromDC
CallWindowProcA
GetGUIThreadInfo
MoveWindow
SendNotifyMessageW
GetClipboardViewer
GetCursorPos
SetScrollPos
GetNextDlgTabItem
RegisterClipboardFormatW
FindWindowExW
GetClassInfoExW
SetRectEmpty
MapDialogRect
DestroyMenu
DrawTextA
IsClipboardFormatAvailable
DeferWindowPos
IntersectRect
CharLowerBuffA
CharUpperBuffW
CheckRadioButton
rasapi32
RasEnumConnectionsA
RasGetConnectStatusA
mfc42
ord3259
ord4465
ord1028
ord3262
ord2985
ord3081
ord2976
ord3401
ord3830
ord3831
ord3825
ord3079
ord4080
ord1058
ord4424
ord3738
ord561
ord1024
ord1576
ord5307
ord4698
ord1073
ord2725
ord5302
ord1013
ord3346
ord2396
ord1018
ord1089
ord3922
ord5731
ord1046
ord2554
ord1168
ord4486
ord6375
ord815
ord2982
ord3953
ord5714
ord1039
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ