Static task
static1
Behavioral task
behavioral1
Sample
f0ba4a8f5966e7628006233a93d2b91a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0ba4a8f5966e7628006233a93d2b91a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0ba4a8f5966e7628006233a93d2b91a_JaffaCakes118
-
Size
515KB
-
MD5
f0ba4a8f5966e7628006233a93d2b91a
-
SHA1
427faffc86c76b0e51230ef98bdd8f72da2421f5
-
SHA256
65f3f3dbe1be8d48793173a9d6758e80d7686b45528c62fe0f028307b29c2f23
-
SHA512
a223574ced245b56c33673cfc315a60954805a540ced3470bb51ed2ad7f04286127eea0ace65620fcf2529978f08bb5a55a810e5e9d2b13dc7c6916d92dbe6ed
-
SSDEEP
12288:KdqWcH6WglxAH7J1D7CH3l8roZOEkQQVQBL9lifN:KdqWTWglxAHl1Gl8JXQBL9lif
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0ba4a8f5966e7628006233a93d2b91a_JaffaCakes118
Files
-
f0ba4a8f5966e7628006233a93d2b91a_JaffaCakes118.exe windows:4 windows x86 arch:x86
aff5ca418fee5095472e0b6e79b9dd64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
RtlUnwind
CommConfigDialogA
WriteFile
HeapDestroy
GetStdHandle
MapViewOfFileEx
GetConsoleOutputCP
GetStringTypeA
IsValidLocale
CloseHandle
MultiByteToWideChar
GetACP
GetModuleHandleA
LeaveCriticalSection
HeapReAlloc
AddAtomW
GlobalFree
SetLastError
GetFileType
GetComputerNameA
InterlockedCompareExchange
LCMapStringW
GetTimeZoneInformation
FlushFileBuffers
SetEnvironmentVariableA
SetHandleCount
QueryPerformanceCounter
DeleteCriticalSection
InterlockedIncrement
HeapAlloc
InterlockedDecrement
SetFilePointer
SetUnhandledExceptionFilter
VirtualAlloc
InterlockedExchange
GetStringTypeW
LCMapStringA
ExitProcess
TerminateProcess
CreateMutexA
VirtualProtectEx
GetCurrentProcessId
WriteConsoleOutputCharacterW
GetVersionExA
CreateFileA
GetLocaleInfoW
Sleep
CompareStringW
TlsFree
GetCurrentThreadId
GetLocaleInfoA
EnterCriticalSection
WriteConsoleW
GetNamedPipeInfo
GetStartupInfoA
GetUserDefaultLCID
HeapFree
ReadFile
lstrlen
ExpandEnvironmentStringsW
GetTickCount
GetModuleFileNameA
SetStdHandle
GetOEMCP
VirtualQuery
GetCPInfo
GetEnvironmentStrings
GetDateFormatA
TlsAlloc
OpenMutexA
TlsSetValue
HeapSize
GetDiskFreeSpaceW
FreeLibrary
HeapCreate
GetProcessHeap
GetCurrentThread
LoadLibraryA
VirtualFree
IsDebuggerPresent
IsValidCodePage
GetCurrentProcess
GetEnvironmentStringsW
lstrcatW
UnhandledExceptionFilter
InterlockedExchangeAdd
lstrcatA
FreeEnvironmentStringsW
GetProcAddress
GetCommandLineA
InitializeCriticalSection
GetSystemTimeAsFileTime
SetThreadIdealProcessor
TlsGetValue
SetConsoleCtrlHandler
WideCharToMultiByte
EnumSystemLocalesA
RtlFillMemory
FreeEnvironmentStringsA
CompareStringA
GetTimeFormatA
GetConsoleCP
GetCalendarInfoA
GetConsoleMode
GetLastError
gdi32
SetMetaRgn
GetPixel
StrokePath
GetAspectRatioFilterEx
OffsetWindowOrgEx
GetCurrentObject
GetSystemPaletteEntries
SetRectRgn
SetColorAdjustment
SetMiterLimit
GetKerningPairsW
GetTextMetricsA
GetGlyphOutline
EnumObjects
DeleteObject
GetBkMode
GetNearestPaletteIndex
SetMapperFlags
GetKerningPairsA
GetTextFaceA
GetEnhMetaFileBits
SetDIBColorTable
TranslateCharsetInfo
comctl32
InitCommonControlsEx
wininet
SetUrlCacheEntryGroupA
InternetQueryOptionW
user32
SetScrollRange
DrawEdge
CallMsgFilterA
SetSysColors
MapWindowPoints
ChangeDisplaySettingsExA
RegisterClassExA
GetComboBoxInfo
EnumDisplaySettingsExW
DdeNameService
SetWindowLongW
LoadAcceleratorsA
InflateRect
RegisterClassA
comdlg32
PageSetupDlgA
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ