Static task
static1
Behavioral task
behavioral1
Sample
1afa128f115ff7d869f3192de6dabf70_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
1afa128f115ff7d869f3192de6dabf70_JaffaCakes118
-
Size
363KB
-
MD5
1afa128f115ff7d869f3192de6dabf70
-
SHA1
df8a327cdc8ccbeffde8a0a675539ce149ea7511
-
SHA256
2cc16bd3c7fca1efe4b9885167791b55ce7b79b2b1d8e6274c21e36d4382c097
-
SHA512
9305907548234202a482004c161b904ea22054350420b687182dc6c8a3ce4e3bb7afbc015698e81d0171f7d3c2c05aaeb4dd9b73ed261fc7e61a2320e6f5ea5f
-
SSDEEP
6144:XCPNBz1y+yIoFSspHWX/EzuWWhfPKKFa1laWGwyCSJR0WrZp9ICeGSvz:XCPNBzNf/F7FKmAeqWrCiCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1afa128f115ff7d869f3192de6dabf70_JaffaCakes118
Files
-
1afa128f115ff7d869f3192de6dabf70_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ea046eb855c2c9cf4d430341e7aa5d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GlobalAlloc
LoadLibraryW
GetSystemPowerStatus
LeaveCriticalSection
GetFileAttributesA
GetNamedPipeInfo
FindNextVolumeW
GetBinaryTypeA
ReadFile
CreateFileW
SetComputerNameExW
CreateActCtxA
lstrlenW
SetConsoleTitleA
FlushInstructionCache
FormatMessageA
GetProcAddress
GetLocalTime
GetAtomNameA
SetThreadPriorityBoost
SetCommMask
GlobalWire
GetModuleHandleA
CompareStringA
PeekConsoleInputA
GetCPInfoExA
DeleteFileW
ReadConsoleOutputCharacterW
lstrcpyW
GetStringTypeW
WriteConsoleW
VirtualFree
OutputDebugStringW
SleepEx
SetConsoleActiveScreenBuffer
SetMailslotInfo
MoveFileExW
VerSetConditionMask
SetConsoleTextAttribute
LoadResource
GetProfileIntW
GetLocaleInfoA
SetLocaleInfoA
GlobalMemoryStatus
RemoveVectoredExceptionHandler
GetNamedPipeHandleStateW
ExitProcess
EncodePointer
DecodePointer
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
HeapAlloc
EnterCriticalSection
GetLastError
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetConsoleMode
ReadConsoleW
HeapFree
CloseHandle
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetConsoleCP
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
HeapReAlloc
SetStdHandle
LCMapStringW
FlushFileBuffers
SetEndOfFile
user32
GetMessageExtraInfo
advapi32
BackupEventLogW
SetFileSecurityA
GetSecurityDescriptorSacl
AddAce
InitializeSid
RegReplaceKeyA
ObjectCloseAuditAlarmA
SetSecurityDescriptorOwner
RegQueryMultipleValuesA
GetSecurityDescriptorControl
GetSecurityDescriptorRMControl
StartServiceCtrlDispatcherW
OpenProcessToken
OpenServiceA
AddAccessDeniedAceEx
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 116.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ