Static task
static1
Behavioral task
behavioral1
Sample
6f742ded41e3a5cad4cbe74128e833f7_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
6f742ded41e3a5cad4cbe74128e833f7_JaffaCakes118
-
Size
351KB
-
MD5
6f742ded41e3a5cad4cbe74128e833f7
-
SHA1
b4ad7977450f002093be5274a26c5c7d7d82aef0
-
SHA256
98933c4dfb0ffa2b7ba283759dd4bcbb87d477250c7a0f8fbfcb5853f2a199cb
-
SHA512
780aeb499b5dab64930383c80894ebc0b7b3ca1aa0283ceba50fb095dd2dbdda9d573cbc1cb1697785be45d344abc0a689f37c7ee212690bb1a178f5aab8f81d
-
SSDEEP
6144:1BLtiT5nAO7OaW6Oqkh0QS/ec2P1NsZNefdddtFlYkl5d9hrg5iM8XRtu9gr9Yyh:VitnhOaW6OqU0QS/ecy1NsZNefdddtFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6f742ded41e3a5cad4cbe74128e833f7_JaffaCakes118
Files
-
6f742ded41e3a5cad4cbe74128e833f7_JaffaCakes118.exe windows:5 windows x86 arch:x86
69f91e06d301aa22fa66664a74367a62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
lstrcpyA
GetModuleHandleW
WriteConsoleW
SetFilePointerEx
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
RaiseException
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
DecodePointer
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
user32
MessageBoxW
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE