Static task
static1
Behavioral task
behavioral1
Sample
7301cdb1e86e8678b9080fe74d71da63_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7301cdb1e86e8678b9080fe74d71da63_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7301cdb1e86e8678b9080fe74d71da63_JaffaCakes118
-
Size
2.3MB
-
MD5
7301cdb1e86e8678b9080fe74d71da63
-
SHA1
56ef09813ff30a12a0e4613f4a2f8bd78c85a661
-
SHA256
6d5c0faae0c9a95ba2c303b959d2f837b88f482a343402f8d720b73689612675
-
SHA512
59c5b939216cf85794e6860759aa1bf60e88e62be91add60356f40863fba57685e83172fb4eb9bea80aa8f2404a52a193598be938efe3817d66f30abccb7396c
-
SSDEEP
49152:6De9ADg4NK+xnDDdMpA4ZnetgvJ9cNpCTd8db:6DiTEnL4MteJ6NpCTd8db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7301cdb1e86e8678b9080fe74d71da63_JaffaCakes118
Files
-
7301cdb1e86e8678b9080fe74d71da63_JaffaCakes118.exe windows:5 windows x86 arch:x86
93721cc6badfdf7a820a95ef9f90e96e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
VirtualAlloc
GetLastError
CloseHandle
GetSystemTime
FileTimeToLocalFileTime
ConnectNamedPipe
ReadFileScatter
CreateFileMappingW
GetModuleFileNameW
GetSystemDirectoryW
ReplaceFileW
FindCloseChangeNotification
GetConsoleWindow
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
SetLastError
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
FreeLibrary
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
DuplicateHandle
WaitForSingleObject
GetExitCodeThread
CreateThread
ExitThread
CreateTimerQueue
SetEvent
LoadLibraryW
oleaut32
CreateErrorInfo
SetErrorInfo
VarBstrFromBool
VarDateFromStr
SafeArrayUnaccessData
SafeArrayGetLBound
SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayGetUBound
user32
CharNextW
AppendMenuW
GetDC
AdjustWindowRect
ScreenToClient
IntersectRect
DrawIconEx
CreateIconIndirect
MapDialogRect
ModifyMenuW
secur32
DeleteSecurityContext
QuerySecurityPackageInfoW
GetUserNameExW
TranslateNameW
InitializeSecurityContextW
FreeCredentialsHandle
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lwsac8 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ