Static task
static1
Behavioral task
behavioral1
Sample
0eff50f72e68e199a70e174c623904e7_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0eff50f72e68e199a70e174c623904e7_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0eff50f72e68e199a70e174c623904e7_JaffaCakes118
-
Size
215KB
-
MD5
0eff50f72e68e199a70e174c623904e7
-
SHA1
df9c378f5f66673abd435cd0de04fd6b87f7e173
-
SHA256
09a16f94574a8739772f75c8a612bb42072a2c067cdf71115382dd0fdc351db2
-
SHA512
043fbaff76f78225adf7aba2e69dd9222da7e8a049a6d60ad7624b5f472ead3c3282e174bed872e78d400d03389ebcf9284da888dab6f8669e3b1be4e91eed7b
-
SSDEEP
3072:R51Sm6JiWR4tEMLsK9jVbdd5G45A3waWGOEN+TBmYAPdhim1ww7EGKB170U4mAQ:R5oTALVFJds3waWD5TBgPqe7ynAUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eff50f72e68e199a70e174c623904e7_JaffaCakes118
Files
-
0eff50f72e68e199a70e174c623904e7_JaffaCakes118.exe windows:5 windows x86 arch:x86
f7c439bb10007b41c8cf79fb8497eec0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetModuleFileNameW
lstrcatA
MultiByteToWideChar
lstrlenW
DisconnectNamedPipe
CreateJobObjectA
GetProcAddress
LocalAlloc
WriteProfileSectionW
ConvertDefaultLocale
GetModuleHandleA
FreeEnvironmentStringsW
RequestWakeupLatency
OutputDebugStringA
SetCalendarInfoA
_lopen
TransactNamedPipe
LoadResource
lstrcpyA
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetComputerNameExA
GetVersionExW
EnumResourceTypesA
CreateActCtxW
GetCompressedFileSizeW
EnumCalendarInfoExW
TerminateJobObject
GetNumaAvailableMemoryNode
GetConsoleCP
SetFilePointer
TlsFree
GetNumaProcessorNode
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
user32
IsCharAlphaNumericA
CreateDesktopW
GetClipboardFormatNameW
LoadMenuIndirectA
CharUpperBuffW
ImpersonateDdeClientWindow
SetSystemCursor
LoadCursorW
GetGUIThreadInfo
SetPropA
CharUpperBuffA
PeekMessageA
GetUserObjectInformationW
GetKeyboardLayoutList
gdi32
AnimatePalette
GetEnhMetaFileA
CreateDIBSection
EnumFontFamiliesExW
TextOutW
GdiComment
GetMiterLimit
winspool.drv
DeviceCapabilitiesW
advapi32
ReportEventA
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ