Static task
static1
Behavioral task
behavioral1
Sample
5d0b535797bcd3fd8b482e250e339aa6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5d0b535797bcd3fd8b482e250e339aa6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5d0b535797bcd3fd8b482e250e339aa6_JaffaCakes118
-
Size
260KB
-
MD5
5d0b535797bcd3fd8b482e250e339aa6
-
SHA1
71d95bf3290b7f39498cd20fb983feb46f6a6d5c
-
SHA256
30a798f90d068468a49bda1cf1dc25d8a89b6ff3acdcf3715f852bf5aba48d7f
-
SHA512
ab297abcfcc8a85d59dcd749ea0eeee8ea6f8e47a78a2c99ef70f1691385109981b587dbad44391ca3fbea0a36d117c1bc2aa408475e5ef741fb8e5461075392
-
SSDEEP
6144:zgTXabnD9sKIuXm968jhvz/+gt0EF6E1i:ziWnD9sxtjhz+gj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d0b535797bcd3fd8b482e250e339aa6_JaffaCakes118
Files
-
5d0b535797bcd3fd8b482e250e339aa6_JaffaCakes118.exe windows:5 windows x86 arch:x86
caf18f101a9f6ac420efe03b271a8d9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
FreeConsole
FindNextVolumeW
GetFileAttributesW
SetTimeZoneInformation
GetThreadPriorityBoost
lstrlenW
DisconnectNamedPipe
GetTapeStatus
MoveFileW
DisableThreadLibraryCalls
LocalAlloc
IsWow64Process
GetNumberFormatW
FoldStringW
GetSystemPowerStatus
EnumDateFormatsA
GlobalUnWire
FreeEnvironmentStringsW
VirtualProtect
GetShortPathNameW
SetCalendarInfoA
_lopen
DeleteTimerQueueTimer
GetFileInformationByHandle
DebugBreak
FindNextVolumeA
SuspendThread
LCMapStringW
GetThreadSelectorEntry
GetVolumePathNameW
GlobalAlloc
CreateDirectoryExA
SetThreadExecutionState
GetCurrentProcess
EnumCalendarInfoW
BuildCommDCBAndTimeoutsA
VirtualQuery
lstrlenA
GetPrivateProfileSectionNamesW
GetSystemInfo
ExitProcess
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
SetFilePointer
CloseHandle
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetProcAddress
GetModuleHandleW
WriteFile
GetModuleFileNameW
GetModuleFileNameA
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
ReadFile
LoadLibraryW
WriteConsoleW
CreateFileW
gdi32
GetEnhMetaFileHeader
GetWindowExtEx
advapi32
RegDeleteValueW
NotifyChangeEventLog
CreateProcessAsUserW
EqualSid
AccessCheckAndAuditAlarmA
QueryServiceLockStatusA
RegSetValueExA
OpenSCManagerW
IsValidAcl
FreeSid
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ