Static task
static1
Behavioral task
behavioral1
Sample
6e37db9dad23728dba3cfb57261f8020_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e37db9dad23728dba3cfb57261f8020_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6e37db9dad23728dba3cfb57261f8020_JaffaCakes118
-
Size
1.3MB
-
MD5
6e37db9dad23728dba3cfb57261f8020
-
SHA1
c82313f11c5a89f140c6fdc556b6593b1c4d929c
-
SHA256
65df656361d88c36b12d770e49cbc8677b1ae7264d1293c9d2036d7fd82e5be4
-
SHA512
5dce2d0e7f0d1dfa112ee43cc84141dbe3b92152d5972570dbe9b654230b1fa56e2b95b7f57799b985d373d158e8419dcc48c516306d23ccbca75bbfed7dc702
-
SSDEEP
12288:saPoHexoN2AItnwymvQyuVrz9vfdqb2JOBPOeh3N7LZix4gpl7tmt//p3:saAHexoNFIdZyuVRfs6ABrnLg/09/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e37db9dad23728dba3cfb57261f8020_JaffaCakes118
Files
-
6e37db9dad23728dba3cfb57261f8020_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb5d5e2b34079cd81aa8e41de3c856ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointerEx
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
WriteConsoleW
DecodePointer
CreateEventA
GetSystemTimeAsFileTime
OpenEventA
GetModuleHandleA
GetTickCount
WaitForSingleObjectEx
WaitForMultipleObjectsEx
ReleaseSemaphore
Sleep
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
SetEvent
ResetEvent
SetWaitableTimer
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
SystemTimeToFileTime
LocalFree
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EncodePointer
RaiseException
RtlUnwind
GetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExW
SetLastError
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetACP
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
user32
GetDC
ReleaseDC
gdi32
DeleteDC
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
Sections
.text Size: 799KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ