Static task
static1
Behavioral task
behavioral1
Sample
48596222847f169c2e6c6f0a11fe1472_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48596222847f169c2e6c6f0a11fe1472_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
48596222847f169c2e6c6f0a11fe1472_JaffaCakes118
-
Size
840KB
-
MD5
48596222847f169c2e6c6f0a11fe1472
-
SHA1
f9387c9e2c52ba289e6792bef999ee3e190b03d8
-
SHA256
492f391683462222756dabdff727a545206540f4ed417d8c056845a87f7b628c
-
SHA512
2068a127cecc8a7f870ae6ce68544fa59db3e29b31a727c1ff6b469ef6d08f1aa65fc702709e4a849aa689dda46b97324536a689442d2a91bf903b59f81132e4
-
SSDEEP
24576:cbBqZmJKCY9gEAn0ZOWQ3K3yK6rQZgU3p:YqZmAb9En0ZxQg00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48596222847f169c2e6c6f0a11fe1472_JaffaCakes118
Files
-
48596222847f169c2e6c6f0a11fe1472_JaffaCakes118.exe windows:5 windows x86 arch:x86
c4920fc16331d29b2ddeaa8e91b216c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetMappedFileNameW
GetDeviceDriverFileNameW
winspool.drv
EnumPrintersW
StartDocPrinterW
kernel32
WriteFile
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GlobalUnlock
VirtualAlloc
HeapAlloc
HeapFree
HeapSize
GetCurrentProcess
GetCurrentThreadId
GetLastError
ReleaseSemaphore
GetFileType
GetLocalTime
lstrcmpiW
OpenWaitableTimerW
RemoveDirectoryW
GetACP
GetLocaleInfoW
GetConsoleWindow
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapReAlloc
GetStringTypeW
user32
AdjustWindowRect
GetKBCodePage
IsCharAlphaW
GetTopWindow
MonitorFromPoint
ole32
ReleaseStgMedium
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 749KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE