Static task
static1
Behavioral task
behavioral1
Sample
e9abe8e444d14fbadccb7b1b54d8f875_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9abe8e444d14fbadccb7b1b54d8f875_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9abe8e444d14fbadccb7b1b54d8f875_JaffaCakes118
-
Size
442KB
-
MD5
e9abe8e444d14fbadccb7b1b54d8f875
-
SHA1
2ad8505e9425b3f6f13d9b1a6c5fd960a5fa4e0d
-
SHA256
d5fc3e4bc05bd60abc9ca9711ea63ed8af25615d22270bc36b926b81d96e1a77
-
SHA512
bd00690f4739a754c37936c2666f7842bcace4aeb782d1c4dd81f66a441d66109f5966959f87a291d53d0038aec951576b568b4ca35a50a66a0e7e72cfba7f55
-
SSDEEP
12288:6HO8eTLlSFqxoErAWtQ0Vv/c1c1vrkt/V:yetSFqiEUIQ0VXci1a/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9abe8e444d14fbadccb7b1b54d8f875_JaffaCakes118
Files
-
e9abe8e444d14fbadccb7b1b54d8f875_JaffaCakes118.exe windows:5 windows x86 arch:x86
299f50bc21d4e4bdaea4638e0079321d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
InterlockedExchange
VirtualProtect
VirtualQuery
LoadLibraryA
GetProcAddress
LockResource
LoadResource
GetModuleHandleA
FindResourceExW
GetCommandLineW
GetModuleHandleW
GetModuleFileNameW
lstrlenW
FreeLibrary
MultiByteToWideChar
FindResourceW
LoadLibraryExW
lstrcmpiW
RaiseException
GetCurrentThreadId
SetEvent
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetStartupInfoW
RtlUnwind
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
VirtualFree
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLastError
SizeofResource
VirtualAlloc
CreateThread
Sleep
CreateEventW
WaitForSingleObject
TlsAlloc
CloseHandle
user32
GetDC
GetDesktopWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
CharNextW
CharUpperW
GetClientRect
advapi32
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegDeleteValueW
ole32
CoUninitialize
CoInitialize
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
oleaut32
VarUI4FromStr
RegisterTypeLi
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
SysFreeString
pdh
PdhBrowseCountersW
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE