Static task
static1
Behavioral task
behavioral1
Sample
00da20d7fb37f76bf7c13c4b20ec6b00_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00da20d7fb37f76bf7c13c4b20ec6b00_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
00da20d7fb37f76bf7c13c4b20ec6b00_JaffaCakes118
-
Size
1.2MB
-
MD5
00da20d7fb37f76bf7c13c4b20ec6b00
-
SHA1
97f111a424d2dbe5c54f9e347333131372c69c90
-
SHA256
fd43a618e80ab94a0cda895bca8c3c98d2e9ea959d12752feae6de81f299f2e1
-
SHA512
9c5e30a81a730471dd2b9c9db2c4b0c0a8a4b1e9da3d2b3313391f1066a57f84fcee21a1318d48ba0d3dc68a88c585f218855651f4dab2c991af61c2f6f9b20c
-
SSDEEP
12288:7rwUPoB5tqPCv61eoCVSkuv00u9Mqqr/OwudgRMhwR3ywlngktYWJW30G:QUC64dL9EzOwk6RCwVg3T30G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00da20d7fb37f76bf7c13c4b20ec6b00_JaffaCakes118
Files
-
00da20d7fb37f76bf7c13c4b20ec6b00_JaffaCakes118.exe windows:5 windows x86 arch:x86
b800b8b9339ff4863f3186bc5082c0cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForMultipleObjects
GetFileSize
CloseHandle
GetSystemTimeAsFileTime
GetSystemInfo
FileTimeToSystemTime
lstrcmpW
OutputDebugStringW
GetTempPathW
GetFullPathNameW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCPInfo
MultiByteToWideChar
CompareStringW
GetLocaleInfoW
GetStringTypeW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
ExitProcess
VirtualAlloc
LocalFree
GlobalFree
GlobalLock
CreateFileW
GetProcAddress
HeapSize
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
GetModuleHandleExW
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameW
WriteFile
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
HeapFree
IsValidCodePage
GetACP
GetOEMCP
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
WriteConsoleW
setupapi
SetupOpenFileQueue
SetupCloseFileQueue
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInstanceIdW
SetupDiGetDriverInfoDetailW
CM_Get_Device_IDW
wininet
InternetSetOptionW
InternetQueryOptionW
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
OpenSCManagerW
ole32
CoTaskMemRealloc
CoTaskMemFree
PropVariantClear
CoTaskMemAlloc
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ