Static task
static1
Behavioral task
behavioral1
Sample
05324d45fb1ce6d362d9a3586add45bb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05324d45fb1ce6d362d9a3586add45bb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
05324d45fb1ce6d362d9a3586add45bb_JaffaCakes118
-
Size
287KB
-
MD5
05324d45fb1ce6d362d9a3586add45bb
-
SHA1
fc8f0bfb773d0d581abfd41029068e3977dc457e
-
SHA256
b5d5a2cc7f8a796009674981f60c76fb99eb6cceb6a19f276e13c0ce9b22ef4c
-
SHA512
db212c715f786516f7c18a911ef3adc2a8bbfafb717186a4b8c07f79420bdb68f243147eca5837875ca5264bf046034e8668e24474d2fb38f3d74cc5055a5635
-
SSDEEP
6144:hicu5duTFrk71b4leFE82wZrTAOh15pCiXEu:UVMrk71b4laEEPH15ZXEu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05324d45fb1ce6d362d9a3586add45bb_JaffaCakes118
Files
-
05324d45fb1ce6d362d9a3586add45bb_JaffaCakes118.exe windows:5 windows x86 arch:x86
1e5051db4672dee54f5e9a4942d0e01d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
GetLastError
Process32NextW
CreateFileA
Process32FirstW
CloseHandle
LoadLibraryW
CreateWaitableTimerA
OpenProcess
GetModuleHandleW
FreeLibrary
WriteConsoleW
HeapSize
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetVersionExW
WaitForSingleObject
CreateMutexW
TerminateProcess
DeviceIoControl
GetProcAddress
SetWaitableTimer
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
LoadLibraryExW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetProcessHeap
FindClose
SetEndOfFile
user32
TranslateMessage
PeekMessageW
DispatchMessageW
MessageBoxA
advapi32
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
wininet
InternetSetOptionA
InternetCloseHandle
HttpOpenRequestA
InternetQueryDataAvailable
HttpQueryInfoA
HttpAddRequestHeadersA
InternetOpenA
HttpSendRequestA
InternetConnectA
InternetReadFile
InternetSetOptionW
InternetCrackUrlA
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ