Static task
static1
Behavioral task
behavioral1
Sample
f87fcb5d0a79290f25f751c9eb02251a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f87fcb5d0a79290f25f751c9eb02251a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f87fcb5d0a79290f25f751c9eb02251a_JaffaCakes118
-
Size
10.7MB
-
MD5
f87fcb5d0a79290f25f751c9eb02251a
-
SHA1
97b8e0e7aa9d32dea58a0b0ac373f5fb43413565
-
SHA256
8d4716fdd00c5f1edc2603a7f82785796389c834ecdeed02b8dbd82bb346e35c
-
SHA512
b87fde6f6a67acdb426e180743da17d8def9d44b6728cd5c80ad5acc20b40c291f0c67e469244e3190fd7e632a9e2b17ced70169298cbd8ca1bf83155ebd4924
-
SSDEEP
24576:odUGCUj1yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyr:WPj1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f87fcb5d0a79290f25f751c9eb02251a_JaffaCakes118
Files
-
f87fcb5d0a79290f25f751c9eb02251a_JaffaCakes118.exe windows:5 windows x86 arch:x86
ee6217802b36eb33b63560b404ded3b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadSelectorEntry
GetSystemPowerStatus
FreeConsole
FindNextVolumeW
GetFileAttributesW
SetTimeZoneInformation
GetThreadPriorityBoost
lstrlenW
DisconnectNamedPipe
LCMapStringA
GetTapeStatus
PeekConsoleInputW
MoveFileW
IsValidLocale
LocalAlloc
GetNumberFormatW
FoldStringW
EnumDateFormatsA
FreeEnvironmentStringsW
VirtualProtect
GetShortPathNameW
SetCalendarInfoA
DeleteTimerQueueTimer
GetFileInformationByHandle
DebugBreak
FindNextVolumeA
GetVolumePathNameW
CreateDirectoryExA
SetFileTime
SetThreadExecutionState
GetLogicalDrives
VirtualQuery
lstrlenA
EnumCalendarInfoA
GetPrivateProfileSectionNamesW
DisableThreadLibraryCalls
ExitProcess
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetStdHandle
SetFilePointer
CloseHandle
GetModuleFileNameW
GetModuleFileNameA
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeW
HeapReAlloc
LoadLibraryW
WriteConsoleW
FlushFileBuffers
CreateFileW
gdi32
CombineTransform
GetEnhMetaFileHeader
advapi32
RegSetValueExW
FreeSid
RegDeleteValueW
CreateProcessAsUserW
EqualSid
QueryServiceLockStatusA
OpenSCManagerW
CloseEventLog
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10.5MB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ