Static task
static1
Behavioral task
behavioral1
Sample
21bdbb98b594b9f1b2f78ce9bb20ee6d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21bdbb98b594b9f1b2f78ce9bb20ee6d_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
21bdbb98b594b9f1b2f78ce9bb20ee6d_JaffaCakes118
-
Size
1.1MB
-
MD5
21bdbb98b594b9f1b2f78ce9bb20ee6d
-
SHA1
c8bf70ab787d6c37aeba8b1a630129b0c9af4e1b
-
SHA256
a2a390585e69a196b8da841e79d87bdf5d424b89c95c438f35949d9e4518643d
-
SHA512
8aa662cac99db7dee680689018a3a8319788fd6a850bb8b4705370af9fc560dd2382fdcfd5a2794ee6d68f561485e3f25a164ce301b4d1567b60396d6364ce97
-
SSDEEP
24576:XVANDY0jxDvWFDpcJWkYsdHUMjv7TnG03c:lpA1qDpgWkYG/TG03c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21bdbb98b594b9f1b2f78ce9bb20ee6d_JaffaCakes118
Files
-
21bdbb98b594b9f1b2f78ce9bb20ee6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
7a0805fce8f5b62b136b54022aaa69b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
GetFullPathNameW
GetThreadLocale
FindResourceExW
FindResourceW
LoadLibraryExW
lstrlenW
FormatMessageW
FileTimeToSystemTime
GetSystemInfo
GetLocalTime
GetSystemTimeAsFileTime
CloseHandle
FindClose
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
VirtualAlloc
GlobalUnlock
GlobalLock
GetVersion
FindNextFileW
GetProcAddress
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
comctl32
_TrackMouseEvent
CreateToolbarEx
ImageList_GetImageInfo
ImageList_Write
ImageList_GetDragImage
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Copy
ImageList_GetIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Replace
ImageList_SetOverlayImage
ImageList_ReplaceIcon
ord17
PropertySheetW
DestroyPropertySheetPage
FlatSB_SetScrollPos
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rgrik7 Size: 1001KB - Virtual size: 1001KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ