Static task
static1
Behavioral task
behavioral1
Sample
271a87262eb9b506c3d44aa87f393432_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
271a87262eb9b506c3d44aa87f393432_JaffaCakes118
-
Size
7.1MB
-
MD5
271a87262eb9b506c3d44aa87f393432
-
SHA1
57de66e781fe68803f872ac35a778e53f6b5ce00
-
SHA256
8ed475d556176db5746f055ae39aa8dd3d227978c87ac03765d1beb14baf9399
-
SHA512
5593048145214a53f29ade59b4e6009b4a081a93e071026903c2546a72d6fd8b00a52042c50a0bae673f80f9d56bfd521e215d6010fb1078ccdd16de19f2a02e
-
SSDEEP
98304:0awsoCHlC9XQ5NwDjeS9jIzaPrZAwx6UWcCVJz9CkFvLthpOHW5sHH4/DNYRoJRx:rE62ejzOrZAdUWFtJa5HyZPgI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271a87262eb9b506c3d44aa87f393432_JaffaCakes118
Files
-
271a87262eb9b506c3d44aa87f393432_JaffaCakes118.exe windows:5 windows x86 arch:x86
324db05a7ac9fdc4b15062b4dccac6b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetLastError
CreateEventA
RaiseException
DecodePointer
HeapDestroy
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetStringTypeW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
EnumResourceNamesW
FindResourceW
GetModuleHandleW
LoadResource
LockResource
SizeofResource
ReadFile
GetModuleFileNameA
VirtualProtect
SetLastError
VirtualAlloc
SetFilePointer
CreateFileW
LoadLibraryA
GetNativeSystemInfo
GetProcAddress
GetFileSize
FreeLibrary
IsBadReadPtr
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
EncodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetACP
LCMapStringW
GetFileType
DeleteCriticalSection
user32
PostQuitMessage
EndPaint
BeginPaint
DestroyWindow
UpdateWindow
ShowWindow
CreateWindowExW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
PostMessageW
DefWindowProcW
RegisterClassExW
LoadCursorW
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 896KB - Virtual size: 895KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 513KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ