Static task
static1
Behavioral task
behavioral1
Sample
f2bb9e5d06b05b7d84c59c90a88d4e9e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2bb9e5d06b05b7d84c59c90a88d4e9e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2bb9e5d06b05b7d84c59c90a88d4e9e_JaffaCakes118
-
Size
128KB
-
MD5
f2bb9e5d06b05b7d84c59c90a88d4e9e
-
SHA1
7a8768f7e08b6cfb7c84fbda466b102117c67f8d
-
SHA256
57f2b1ab662b8123053ce506a6336d82b3115c9e7688d04222a58042b7ee9cc1
-
SHA512
8e8edb333facde747353bf47485cb67622e0be12e308fca146cb876a1fcc064a071c929af1de1cde48fbc1ecf7e049174795c93588267ebb90a94c44ba6b5efc
-
SSDEEP
3072:a/+H9DHTkuQM2oXEpmP4tA4pb7ATKe9C7:a/+HhHTTQMxEpppb7AOGW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2bb9e5d06b05b7d84c59c90a88d4e9e_JaffaCakes118
Files
-
f2bb9e5d06b05b7d84c59c90a88d4e9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b694405f74ec4e6af1c20851f43543e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetWindowsDirectoryA
GetProcAddress
FreeLibrary
LoadLibraryA
CloseHandle
WaitForSingleObject
GetCurrentProcess
GetSystemDefaultLCID
GetPrivateProfileStringA
lstrcatA
MoveFileExA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetLocaleInfoA
lstrlenA
GetLastError
lstrcpyA
GetVersionExA
lstrcpynA
GetVersion
CreateProcessA
GetSystemDirectoryA
GetSystemTime
IsBadWritePtr
TerminateProcess
CompareStringW
CompareStringA
SetEnvironmentVariableA
LCMapStringW
GetTimeZoneInformation
lstrcmpiA
GetLocalTime
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
LCMapStringA
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetACP
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetOEMCP
SetFilePointer
SetEndOfFile
ReadFile
user32
wsprintfA
ExitWindowsEx
MessageBoxA
advapi32
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
shell32
FindExecutableA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ