Static task
static1
Behavioral task
behavioral1
Sample
210a567a53c5a01642e5f6063c187057_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
210a567a53c5a01642e5f6063c187057_JaffaCakes118
-
Size
179KB
-
MD5
210a567a53c5a01642e5f6063c187057
-
SHA1
f9f756e698c3ef5b1c005c3f3e38a76c67e1d590
-
SHA256
8fcfa4eac6ec8849bd349b7a6bb74a763e7c25548556c88d03361e05e89f4655
-
SHA512
b1eb5379172a7aa01f9e0e407b8296802aeb150f003ef4b852b38517d65817d60317b52d4e26771be4d6dc11864fe7bd29de364011011ffcb42342d2be98da79
-
SSDEEP
3072:YmJskjk7LR7aRgi603+W5Dt3ycjGD6RKQjNB94:YmJHk7LR7kD6s+IpGmRVjNB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 210a567a53c5a01642e5f6063c187057_JaffaCakes118
Files
-
210a567a53c5a01642e5f6063c187057_JaffaCakes118.exe windows:5 windows x86 arch:x86
b4e1f34cba02a2d1dac29d34296bc556
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCalendarInfoA
GetVolumePathNameA
GetConsoleOutputCP
GetCPInfoExW
GetProcAddress
VirtualProtectEx
GetTickCount
FindAtomA
GetModuleHandleA
lstrcatW
GetCPInfoExA
SetFileApisToANSI
SetFirmwareEnvironmentVariableA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers
gdi32
GetDCBrushColor
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ