Static task
static1
Behavioral task
behavioral1
Sample
6f9c8d19bb0577365f8ca8280c098538_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6f9c8d19bb0577365f8ca8280c098538_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6f9c8d19bb0577365f8ca8280c098538_JaffaCakes118
-
Size
2.3MB
-
MD5
6f9c8d19bb0577365f8ca8280c098538
-
SHA1
233d8c42e0c1d7de0150a40e62e7f4201f97527b
-
SHA256
206ab6cd5a7c4c65c7a359d7e93fcf98a4393539dd3e5c521591be1d5ab256e9
-
SHA512
c6007ccc56be71560f11cb452eccd4629f470e0400afa751b5003c709d14210720d07188ef0147ee99f1f521b67f1315928974181c6c12290baf3ccc2f890e1e
-
SSDEEP
49152:6DJW69OSlCfUVl9DdMpA4ZnetgvJ9cNpCTd8db:6Dt9BwfUVH4MteJ6NpCTd8db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f9c8d19bb0577365f8ca8280c098538_JaffaCakes118
Files
-
6f9c8d19bb0577365f8ca8280c098538_JaffaCakes118.exe windows:5 windows x86 arch:x86
93721cc6badfdf7a820a95ef9f90e96e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
VirtualAlloc
GetLastError
CloseHandle
GetSystemTime
FileTimeToLocalFileTime
ConnectNamedPipe
ReadFileScatter
CreateFileMappingW
GetModuleFileNameW
GetSystemDirectoryW
ReplaceFileW
FindCloseChangeNotification
GetConsoleWindow
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
SetLastError
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
FreeLibrary
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
DuplicateHandle
WaitForSingleObject
GetExitCodeThread
CreateThread
ExitThread
CreateTimerQueue
SetEvent
LoadLibraryW
oleaut32
CreateErrorInfo
SetErrorInfo
VarBstrFromBool
VarDateFromStr
SafeArrayUnaccessData
SafeArrayGetLBound
SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayGetUBound
user32
CharNextW
AppendMenuW
GetDC
AdjustWindowRect
ScreenToClient
IntersectRect
DrawIconEx
CreateIconIndirect
MapDialogRect
ModifyMenuW
secur32
DeleteSecurityContext
QuerySecurityPackageInfoW
GetUserNameExW
TranslateNameW
InitializeSecurityContextW
FreeCredentialsHandle
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lwsac8 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ