Static task
static1
Behavioral task
behavioral1
Sample
4376ac7ef6b75e1d34ed4f0e17e97285_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4376ac7ef6b75e1d34ed4f0e17e97285_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4376ac7ef6b75e1d34ed4f0e17e97285_JaffaCakes118
-
Size
2.3MB
-
MD5
4376ac7ef6b75e1d34ed4f0e17e97285
-
SHA1
35ac6630c247fca548c23383c5f6513db86a4808
-
SHA256
789e115b2423c1446644396a3ca5ff5b3ea647d544d623815f2b4dfe96b140bd
-
SHA512
ef5da8a2bafa157133bdf43b9359388664998c2e528b29fa00a76aef4b2cbebdda7c4c8b4049ea2789564b4d505bcb47b46147143c0e06019165eb4498e8ecb4
-
SSDEEP
12288:fk/+g7kNWmCnMFwVDBjac3TTt+Nt2/9fPH3DlMTkDwRMty8puI8EJcAOJXYrwxz9:fGRcWmwbrGS5yrR1iJcpRNqG/F3eefn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4376ac7ef6b75e1d34ed4f0e17e97285_JaffaCakes118
Files
-
4376ac7ef6b75e1d34ed4f0e17e97285_JaffaCakes118.exe windows:5 windows x86 arch:x86
494797052d55a854ab9e2a41dcf0d086
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
DeleteCriticalSection
LockFile
MulDiv
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
LoadLibraryW
GetModuleHandleW
CreateDirectoryW
GetFullPathNameW
CreateFileW
FindNextFileW
MultiByteToWideChar
LCMapStringW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
HeapDestroy
VirtualAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
HeapSize
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
CloseHandle
user32
GetKeyboardLayoutList
GetKeyboardLayout
DrawFrameControl
GetMessageW
PostThreadMessageW
DdeCmpStringHandles
MonitorFromPoint
CopyIcon
DestroyCursor
FindWindowExW
SetRect
DrawFocusRect
GetSysColor
GetCursorPos
MessageBeep
GetScrollRange
LockWindowUpdate
RedrawWindow
BeginPaint
GetDCEx
MenuItemFromPoint
SetMenuDefaultItem
CheckMenuItem
GetMenu
LoadMenuW
GetFocus
IsCharAlphaNumericW
CharPrevW
IsDlgButtonChecked
EndDeferWindowPos
BeginDeferWindowPos
SetWindowPos
CloseWindow
GetClassInfoExW
DefWindowProcW
userenv
GetUserProfileDirectoryW
EnterCriticalPolicySection
RegisterGPNotification
UnregisterGPNotification
LoadUserProfileW
advapi32
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ti541 Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.o42r Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ene66 Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ