Static task
static1
Behavioral task
behavioral1
Sample
6ac6a9513589c21ad3bb619599dba952_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
6ac6a9513589c21ad3bb619599dba952_JaffaCakes118
-
Size
549KB
-
MD5
6ac6a9513589c21ad3bb619599dba952
-
SHA1
4444e6939f17ec3ca78a78d692006d9443b98f96
-
SHA256
d6600f71bb227add6e45327cbc8635a4c98ac1037aa3a85f15a701939a4d94fc
-
SHA512
445df68646f4f1b66c1a22a6d6a707d92e140e502c029b578427b0b5820fdd480fc553ac573a3f37a18b7797f515470c7b08cf463cca8d3e309bdbf155e5d3a5
-
SSDEEP
12288:T15WsVEQoYwNBAEbDdvi5yYO3A+RkQVHWVL128riwjd0o:TT+QXoB7YMYuRv9412ki4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6ac6a9513589c21ad3bb619599dba952_JaffaCakes118
Files
-
6ac6a9513589c21ad3bb619599dba952_JaffaCakes118.exe windows:5 windows x86 arch:x86
c6cc11c6ca73f24010b6785e5e3d46db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
LoadLibraryW
TerminateThread
TerminateProcess
GetThreadPriorityBoost
GetStdHandle
GetLastError
SetLastError
GetProcAddress
LoadLibraryA
InterlockedExchangeAdd
LocalAlloc
GetCurrentConsoleFont
GetCommTimeouts
GetCurrentProcess
DuplicateHandle
CloseHandle
GetCurrentProcessId
GetStringTypeW
GetStringTypeA
LCMapStringW
GetDriveTypeW
FindResourceExW
VirtualProtect
GlobalMemoryStatus
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
DeleteCriticalSection
RtlUnwind
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
HeapSize
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
user32
EndPaint
DrawTextExW
GetScrollRange
SetPropA
LoadStringW
ShowScrollBar
LoadImageA
PaintDesktop
DestroyIcon
MoveWindow
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.version Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.version Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ