Static task
static1
Behavioral task
behavioral1
Sample
6c3cd20c8f084bb9f59bbe05ec1738b5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6c3cd20c8f084bb9f59bbe05ec1738b5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6c3cd20c8f084bb9f59bbe05ec1738b5_JaffaCakes118
-
Size
820KB
-
MD5
6c3cd20c8f084bb9f59bbe05ec1738b5
-
SHA1
384afad227a90f2d3a7cb91aa48545dc4b756d42
-
SHA256
33793b319d5f8947490990fddda47e5e83d315a004e0b0d5f5830140907de813
-
SHA512
1aa168645234f7ce757a761789fb9c22590d8d7fccca7a0e75a8f2ce03d82b467651408d972b9dfe07fa94ca25b4a906a93ff915c3bf780e1e22611fa90ac952
-
SSDEEP
24576:BLwlfewbUPuN7inR0YlLyfDN3Dh4j9Z1UkY:B86MGnKhDNzhyrBY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c3cd20c8f084bb9f59bbe05ec1738b5_JaffaCakes118
Files
-
6c3cd20c8f084bb9f59bbe05ec1738b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
8c7170e0bbf0d68ffc9a5ac4426b39c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThreadId
GetLastError
InitializeCriticalSection
ResetEvent
ReadFile
CloseHandle
GetCommProperties
GetLocalTime
FileTimeToSystemTime
ConnectNamedPipe
UnmapViewOfFile
GetProcessHeap
CreateEventW
CreateFileMappingW
GetModuleFileNameW
ExpandEnvironmentStringsW
OutputDebugStringW
GetSystemDirectoryW
CreateFileW
GetVersionExW
GetOEMCP
CompareStringW
GetThreadLocale
GetUserDefaultLCID
GetStringTypeW
EnumSystemCodePagesW
HeapFree
ResetWriteWatch
VirtualAlloc
LocalAlloc
GlobalUnlock
GlobalLock
ReadFileScatter
GetProcAddress
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetCommandLineW
IsProcessorFeaturePresent
SetLastError
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetCPInfo
IsDebuggerPresent
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
WriteConsoleW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
user32
CopyAcceleratorTableW
EndMenu
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 750KB - Virtual size: 749KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE