Static task
static1
Behavioral task
behavioral1
Sample
e93fcd9f92a2ebcba3f56d236f68a7a0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e93fcd9f92a2ebcba3f56d236f68a7a0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e93fcd9f92a2ebcba3f56d236f68a7a0_JaffaCakes118
-
Size
337KB
-
MD5
e93fcd9f92a2ebcba3f56d236f68a7a0
-
SHA1
1b94268db8f9a23f43200279e29210715ec94732
-
SHA256
d50d5beb909326920b3a12b1307fd17bc8f6a2b0991c590da7973372eeb5a083
-
SHA512
f3ba9053c5506cb1bf835ab1c66cbfa7f071573e7a9e901637e13f0b5c92329a6b7c16b3ad607c4cb98b6dc85e6b40bbe7ef139b83f5c8ee22457bffba9e5ede
-
SSDEEP
6144:Xbl1GbZzNLAy8Z1rq8OrW8B4LAkv2fo5A4Idpu7jPKtSvla4WB82vxNh:Xbl1GbZzNLAy8Z1rq8iW8MT2foxI/u70
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e93fcd9f92a2ebcba3f56d236f68a7a0_JaffaCakes118
Files
-
e93fcd9f92a2ebcba3f56d236f68a7a0_JaffaCakes118.exe windows:5 windows x86 arch:x86
12e9520405a64055b79cd11e66c327d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
RegQueryValueExA
ws2_32
WSACleanup
WSAStartup
wininet
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
netapi32
NetUserGetInfo
NetApiBufferFree
kernel32
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCompressedFileSizeA
GetCommandLineA
CloseHandle
UnlockFile
WriteFile
LockFile
SetFilePointer
ReadFile
CreateFileA
CreateMutexA
ExitProcess
OpenMutexA
Sleep
CreateProcessA
CopyFileA
GetModuleFileNameA
GetEnvironmentVariableA
GetShortPathNameA
GetCurrentProcess
MultiByteToWideChar
SetEnvironmentVariableA
CreateThread
SetFileAttributesA
GetLastError
CreateDirectoryA
GetLocalTime
GetVolumeInformationA
GetDriveTypeA
DeleteCriticalSection
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
FindNextFileA
HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleW
GetProcAddress
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
IsDebuggerPresent
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
GetFullPathNameA
GetCurrentDirectoryA
FlushFileBuffers
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RaiseException
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE