Static task
static1
Behavioral task
behavioral1
Sample
7179a0c240977305f04de6c449e1a202_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7179a0c240977305f04de6c449e1a202_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7179a0c240977305f04de6c449e1a202_JaffaCakes118
-
Size
191KB
-
MD5
7179a0c240977305f04de6c449e1a202
-
SHA1
4fecdefd8dfd0da3a22026a806c650fee79cd6aa
-
SHA256
c3ec9dda48e2b566fd8e8d2d87303cbeabd3fb7bc64e37e165bf820647aab1cb
-
SHA512
a5d7c61776d5166ee98e5a2c054c5b63a77002cf1f4988cc4e58eb4c587589652fe2a32260101fc7821068ec5a7f31dc0237d40791cfb0e4de0e1858d386a7e5
-
SSDEEP
3072:xgckLPbVStLLh9UrSrsv58D7iqNmmRtI8S4D7IEF0aW+2w:47ktLLh2egS7i5mw8S4D7FQ+2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7179a0c240977305f04de6c449e1a202_JaffaCakes118
Files
-
7179a0c240977305f04de6c449e1a202_JaffaCakes118.exe windows:5 windows x86 arch:x86
caed305a1ba67bdb001e022828f98c56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFirmwareEnvironmentVariableA
MultiByteToWideChar
SetLastError
SetFirmwareEnvironmentVariableW
SetVolumeLabelW
VirtualProtectEx
GetPrivateProfileIntA
LocalAlloc
SetConsoleOutputCP
VirtualProtect
UnhandledExceptionFilter
GetModuleHandleW
GetLocaleInfoW
LoadLibraryA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
user32
GetMonitorInfoW
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mysec Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ