Static task
static1
Behavioral task
behavioral1
Sample
676734b55087daccd1b51407c9954cec_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
676734b55087daccd1b51407c9954cec_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
676734b55087daccd1b51407c9954cec_JaffaCakes118
-
Size
241KB
-
MD5
676734b55087daccd1b51407c9954cec
-
SHA1
a80e54f2e0c319babf82bf681d555757c2dfd5f5
-
SHA256
a2277ccbce73460705a3365a8152c2308b663a2877b5710d2a4a150dea9f7f45
-
SHA512
7f66a2e69e652f16f50add5311865042afab6786e6070d3ca9022eea4a6c2c30fd795a9e75657c01a076eb685c7f90bc35097a20885f547deb11587443568081
-
SSDEEP
3072:BOqBEFWcUU1nvPpFuoBtjO/ULu/UIUUq8bRObuSq2rlJ77lDcK4+2NvvZv8Y:B3EFMa5xq/UC/Ugsr3lJ77FPmZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 676734b55087daccd1b51407c9954cec_JaffaCakes118
Files
-
676734b55087daccd1b51407c9954cec_JaffaCakes118.exe windows:5 windows x86 arch:x86
864e695e9298d3ee59a395366f43527e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetConsoleOutputCP
GetCPInfoExW
GetProcAddress
SetFirmwareEnvironmentVariableW
EnumResourceLanguagesA
LocalAlloc
WriteProfileSectionW
GetVolumePathNamesForVolumeNameA
SetProcessShutdownParameters
AreFileApisANSI
VirtualProtectEx
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapCreate
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
LoadLibraryW
advapi32
ReportEventA
ole32
OleCreateMenuDescriptor
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ