Static task
static1
Behavioral task
behavioral1
Sample
21a9e1ee0e88c80f3eb0e174a71f2bc4_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
21a9e1ee0e88c80f3eb0e174a71f2bc4_JaffaCakes118
-
Size
3.9MB
-
MD5
21a9e1ee0e88c80f3eb0e174a71f2bc4
-
SHA1
23f61bfe28f04c5d4acbfc787dfd40852c95cea9
-
SHA256
a056d68f544dfc4ef40eb6b4060010e0322906de77d8f16de2a6a3c39f7a0f87
-
SHA512
7a1e987deb2890c52397b9221abb6f1438e3c5bf5b06773350fc3cd2635eb88b7731c4bef6b188383887250734e29b912129db6650e01abc2a3465b1e86aabb0
-
SSDEEP
98304:QY6mJfvGAh44c9RTImkD6TcOqfv8AXoqUV+DqWbmkhR7U:QYPx5cnYD8A04NUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21a9e1ee0e88c80f3eb0e174a71f2bc4_JaffaCakes118
Files
-
21a9e1ee0e88c80f3eb0e174a71f2bc4_JaffaCakes118.exe windows:5 windows x86 arch:x86
92df55fa79e754888d3e5d7c1bbd58fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetCurrentProcess
WaitForSingleObject
SetEvent
SleepEx
GetTickCount
WriteFile
FindActCtxSectionStringA
FindResourceExA
GetConsoleCP
SetFileShortNameW
FreeConsole
GetFileAttributesA
ReadFile
ReleaseSemaphore
SetConsoleTitleA
GetProcAddress
HeapUnlock
ReadFileEx
ResetEvent
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetConsoleTitleW
DeleteCriticalSection
EndUpdateResourceA
GetPrivateProfileSectionW
CommConfigDialogW
HeapAlloc
lstrlenW
LocalUnlock
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
HeapSize
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthFloatW
advapi32
ReportEventW
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.8MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xutigam Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zuv Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fawo Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.payela Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ