Static task
static1
Behavioral task
behavioral1
Sample
5befee55d4d249e0647bda1cf23c3735_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5befee55d4d249e0647bda1cf23c3735_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5befee55d4d249e0647bda1cf23c3735_JaffaCakes118
-
Size
709KB
-
MD5
5befee55d4d249e0647bda1cf23c3735
-
SHA1
c77618c62fc2bfb3dbfad9ef1e0ed590cd6040d2
-
SHA256
963f2a8133f6a5d772fe78943293869c9825a869d110f8f698b9755ad0c5a3f1
-
SHA512
ae477c8367c2a0821e36bcc8685b3ea145446cd3bbc6538dc124ac6d72ea0aa5dcbbf1dd365a310a0a4b93fc0ce8ad85e983b6736fa72162f959d0471ef9bc1d
-
SSDEEP
12288:IJmdbCs3nzRZU/Ip7I3cZxhEgGgYZ4kguBIMFYBFYINDioYrKaNarNLw9AB:8s3nzTdIMxhbGgK4wBNyUrKlM9M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5befee55d4d249e0647bda1cf23c3735_JaffaCakes118
Files
-
5befee55d4d249e0647bda1cf23c3735_JaffaCakes118.exe windows:5 windows x86 arch:x86
b86c5d3fec51c44ce21073f073234fcc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeNameForVolumeMountPointA
GetFullPathNameA
GetEnvironmentVariableW
SetVolumeLabelA
WriteConsoleOutputCharacterW
lstrlenA
HeapAlloc
ClearCommError
GetQueuedCompletionStatus
SetConsoleTextAttribute
FindFirstFileExW
GetTickCount
GetProcessTimes
GlobalAlloc
SizeofResource
EnumSystemCodePagesA
GetWriteWatch
SetConsoleCursorPosition
GetAtomNameW
GetModuleFileNameW
MultiByteToWideChar
IsBadStringPtrA
GetLastError
EnumDateFormatsExA
LoadLibraryA
GetProcessWorkingSetSize
SetFileApisToANSI
GetDefaultCommConfigA
FindFirstVolumeMountPointA
WTSGetActiveConsoleSessionId
VirtualProtect
CompareStringA
SetCalendarInfoA
GetWindowsDirectoryW
GetCurrentProcessId
FindNextVolumeA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
SetFilePointer
CloseHandle
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
CreateFileA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleHandleA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
user32
GetCaretPos
Sections
.text Size: 651KB - Virtual size: 651KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ