Static task
static1
Behavioral task
behavioral1
Sample
747c84f2cc269a6d437ee76c31d02482_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
747c84f2cc269a6d437ee76c31d02482_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
747c84f2cc269a6d437ee76c31d02482_JaffaCakes118
-
Size
4.7MB
-
MD5
747c84f2cc269a6d437ee76c31d02482
-
SHA1
665543d420ee97013b24e372ccb7c92a9e00a8ab
-
SHA256
ce27f562f72b4f6b6495aeae2ecf79782f64b1cac2684ddbc11b301873326c89
-
SHA512
22a349cb740fd1c242ca4c3dcba4ff3a702d347efbf3759a5d4d4fe5a787967b83d0f190f884510cd8596b8e0c7dd147ae1bea42c4de01f757e5adcc3f6ba2fd
-
SSDEEP
24576:wp2AyT8njMnONf8M9Vt3CbfwUEZdsHtDGo4nY/jPGBVbupkqYWzTBez:wNHmTwbmDHFS7E7zT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 747c84f2cc269a6d437ee76c31d02482_JaffaCakes118
Files
-
747c84f2cc269a6d437ee76c31d02482_JaffaCakes118.exe windows:5 windows x86 arch:x86
0a9ba5d77064c2e41b45097bccaa56e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LCMapStringW
HeapSize
WideCharToMultiByte
RtlUnwind
OpenSemaphoreW
WaitCommEvent
SetHandleCount
FreeEnvironmentStringsW
HeapFree
HeapAlloc
HeapDestroy
HeapReAlloc
VirtualAllocEx
IsValidCodePage
GetOEMCP
GetACP
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
Sleep
GetCPInfo
GetStringTypeW
user32
SetScrollPos
GetDC
IsCharUpperW
LoadCursorW
EnumDisplayDevicesW
gdi32
GetTextMetricsW
GetLayout
GetFontLanguageInfo
GetNearestPaletteIndex
GetNearestColor
GetCurrentPositionEx
CreateBrushIndirect
GetLogColorSpaceW
psapi
GetDeviceDriverBaseNameW
GetMappedFileNameW
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ab2iih Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.5MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ