Static task
static1
Behavioral task
behavioral1
Sample
e7b88206925ce5fb16eff135e68d6fde_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e7b88206925ce5fb16eff135e68d6fde_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7b88206925ce5fb16eff135e68d6fde_JaffaCakes118
-
Size
489KB
-
MD5
e7b88206925ce5fb16eff135e68d6fde
-
SHA1
bf8035e38e73469fa18c4c0ec7c822a4f5ae92ab
-
SHA256
b6fd53aa7684f8b9c5459c7b3a9a2460bf62c1a63cd2ed3c899280296367619f
-
SHA512
07b6975be34a9bb055a914e950fb22732b90c8decabe01c3ebefc0a5ec81b14b9bb3e51e6267c1108123c7428d3eca6e47f34be3696f1a906670518300d679bc
-
SSDEEP
6144:+WEHEQxyhWX/k7Eh/mt+cI93aXyN0yHdZtypZynv/OMjl9hAaob3xBeo7x+pNpdY:+WY3Xhut+cIIXy6KiZynZjNA/b3mLp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b88206925ce5fb16eff135e68d6fde_JaffaCakes118
Files
-
e7b88206925ce5fb16eff135e68d6fde_JaffaCakes118.exe windows:4 windows x86 arch:x86
facbecaa8a7f5526e658ca7bb53af699
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjectsEx
ReadConsoleA
GetVersionExA
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
SetStdHandle
EnterCriticalSection
VirtualProtect
GetStringTypeA
LeaveCriticalSection
GetCurrentThread
HeapReAlloc
GetTimeZoneInformation
IsBadWritePtr
GetFileType
OpenMutexA
GetDateFormatA
GetStartupInfoA
InterlockedExchange
SetFilePointer
CompareStringW
DeleteCriticalSection
GetCommandLineA
GetSystemTimeAsFileTime
SetCriticalSectionSpinCount
GetLastError
IsValidLocale
InitializeCriticalSection
SetEnvironmentVariableA
FreeEnvironmentStringsA
HeapSize
HeapFree
TerminateProcess
TlsFree
VirtualAlloc
GetLocaleInfoW
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
GetModuleFileNameA
CreateSemaphoreA
LCMapStringA
VirtualFree
GetStdHandle
CompareStringA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
CreateMutexA
CommConfigDialogW
MoveFileExA
GetCurrentProcessId
SetHandleCount
GetCurrentThreadId
GetTimeFormatA
CreateDirectoryExA
TlsAlloc
GetCurrentProcess
LCMapStringW
SetLastError
RtlUnwind
GetCPInfo
ReadFile
IsValidCodePage
GetEnvironmentStrings
CreateSemaphoreW
GetSystemInfo
EnumSystemLocalesA
VirtualQuery
TerminateThread
HeapDestroy
TlsSetValue
QueryPerformanceCounter
TlsGetValue
GetUserDefaultLCID
UnhandledExceptionFilter
GetTickCount
CloseHandle
SetCurrentDirectoryA
GetModuleHandleA
HeapAlloc
FreeEnvironmentStringsW
FlushFileBuffers
WriteFile
ExitProcess
GetThreadLocale
user32
SetPropA
UnregisterDeviceNotification
LoadIconW
RegisterClassExA
MessageBeep
CloseDesktop
RegisterClipboardFormatA
DeleteMenu
EditWndProc
CharPrevExA
SetSystemCursor
DdeCmpStringHandles
LoadAcceleratorsW
OemToCharBuffA
ReuseDDElParam
OemToCharW
GetListBoxInfo
CharToOemA
LoadKeyboardLayoutA
SetWindowTextA
DefDlgProcW
GetWindowRect
GetMenuItemCount
RegisterClassA
wininet
InternetGetCookieW
InternetCanonicalizeUrlW
FindFirstUrlCacheEntryA
InternetOpenA
advapi32
GetUserNameW
LookupPrivilegeNameA
RegQueryValueExW
RegQueryValueA
CryptSetHashParam
LookupSecurityDescriptorPartsA
ReportEventW
RegEnumKeyExA
CryptReleaseContext
CryptAcquireContextA
CryptSetProviderExA
InitiateSystemShutdownW
RegEnumValueA
CryptEnumProviderTypesA
StartServiceW
AbortSystemShutdownA
RegSetValueW
CryptGetKeyParam
RegCreateKeyExW
CryptGenRandom
RegQueryValueExA
comctl32
InitCommonControlsEx
Sections
.text Size: 349KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ