Static task
static1
Behavioral task
behavioral1
Sample
ec95c5c3f1a70ac88386c3a5b89021f0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec95c5c3f1a70ac88386c3a5b89021f0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec95c5c3f1a70ac88386c3a5b89021f0_JaffaCakes118
-
Size
287KB
-
MD5
ec95c5c3f1a70ac88386c3a5b89021f0
-
SHA1
9c619a69c108dd0591779887b22531aefe90e5eb
-
SHA256
08a43d6cd583e078d53638895532d68609a6f817ea5cd9668c42c6ae8bbe5b5c
-
SHA512
87495778813b56ab82984857837af1cd3d2a73cedf944c4c479181482f99854eb0a12fa22d230dd21155d88dd91e84261d944b0b29464b6fd6121373dc897a4d
-
SSDEEP
6144:SQ8AbOujRAWqngzRJXPqxvi6vsZZewAO+Xm8Dap7rr:+Aj6zgVxPqxq2s9wX8p7rr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec95c5c3f1a70ac88386c3a5b89021f0_JaffaCakes118
Files
-
ec95c5c3f1a70ac88386c3a5b89021f0_JaffaCakes118.exe windows:5 windows
a7f95ca261620b6133e17eddb8a08b2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetLastError
LoadLibraryW
GetProcAddress
GetModuleHandleW
WriteConsoleW
HeapSize
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetProcessHeap
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
SetEndOfFile
wininet
InternetSetOptionW
InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetSetOptionA
InternetCrackUrlA
HttpOpenRequestA
InternetQueryDataAvailable
HttpQueryInfoA
HttpAddRequestHeadersA
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ