Static task
static1
Behavioral task
behavioral1
Sample
292635dd480925731d52a8fe4d03b33f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
292635dd480925731d52a8fe4d03b33f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
292635dd480925731d52a8fe4d03b33f_JaffaCakes118
-
Size
2.4MB
-
MD5
292635dd480925731d52a8fe4d03b33f
-
SHA1
8e0c5392de115d70cd4c411d02710450c0cd3a45
-
SHA256
11a44413adc74f4d97348f277339893854e14fba69d4f2ba9e8d1a060a38a753
-
SHA512
ad42a01eda21631a4b0eb54dc861f405057898f0b09c68bc7a72aa3d9d56d0926bb77d8ae1e1327393632239f76c87c8e6a9cd7296e410c5bd99f62d0fa44a39
-
SSDEEP
24576:n7nupoFAcHoHrhlnoeNOXf3Jx8E4hj1ojxcBkq05:7AVcE1BzM3Jb4hjejxcBkq05
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 292635dd480925731d52a8fe4d03b33f_JaffaCakes118
Files
-
292635dd480925731d52a8fe4d03b33f_JaffaCakes118.exe windows:6 windows x86 arch:x86
9b985e2fa260727977a3d99619245fae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
GetLastError
TlsFree
WriteConsoleW
CreateFileW
SetFilePointerEx
VirtualAlloc
TlsAlloc
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CloseHandle
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
FormatMessageA
LocalFree
RtlUnwind
RaiseException
EncodePointer
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetFileType
SetStdHandle
GetStringTypeW
DecodePointer
user32
GetDC
gdi32
OffsetWindowOrgEx
ole32
OleInitialize
ws2_32
WSAStartup
WSACleanup
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.my_dat0 Size: 512B - Virtual size: 273B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vxc Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ