Static task
static1
Behavioral task
behavioral1
Sample
65130fdc9e86c30b9b0837b3b538c2b2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65130fdc9e86c30b9b0837b3b538c2b2_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
65130fdc9e86c30b9b0837b3b538c2b2_JaffaCakes118
-
Size
1.9MB
-
MD5
65130fdc9e86c30b9b0837b3b538c2b2
-
SHA1
945bd12cae419572f45ec94ac100e4c82f572d61
-
SHA256
37f2585ea1e16dbe58ce1b217522e3340403fd56b63424372ff080426601b7d1
-
SHA512
b046aee9118d4e72bf44fd9816c8ff2c8000282763be9d6a21318ced596f946936d1aa45c5fa8a52e067ebcffe6827096149dbe548b7eca0d0af23a85f2cae62
-
SSDEEP
12288:K9EhFcgPvs6CQ6Es1CaAX5QHNS5tcgB/JflghfqdGanYMncJB3iMUC7x3TsLMAU/:K9E7fCQBaM5fHHJsf6a3i103TsA5me
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65130fdc9e86c30b9b0837b3b538c2b2_JaffaCakes118
Files
-
65130fdc9e86c30b9b0837b3b538c2b2_JaffaCakes118.exe windows:5 windows x86 arch:x86
a88e17bf41edc634bd084a3b7853451a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ResetWriteWatch
HeapReAlloc
ResetEvent
WaitForMultipleObjects
SetEndOfFile
PurgeComm
MulDiv
GetLocalTime
FileTimeToLocalFileTime
DosDateTimeToFileTime
GetNamedPipeInfo
CreateFileMappingW
GetCompressedFileSizeW
CreateNamedPipeW
GetConsoleWindow
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapFree
CreateFileW
user32
DdeReconnect
GetTopWindow
GetParent
SetWindowLongW
InvertRect
GetWindowTextLengthW
SetScrollRange
GetUpdateRgn
GetWindowDC
DeleteMenu
CreatePopupMenu
SetTimer
CharPrevW
GetDlgItem
IsIconic
ShowWindowAsync
CallWindowProcW
DispatchMessageW
GetMouseMovePointsEx
GetKeyboardLayoutList
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 709KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ