Static task
static1
Behavioral task
behavioral1
Sample
7b5f30044ab2cbd750cc6ccde75911f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b5f30044ab2cbd750cc6ccde75911f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7b5f30044ab2cbd750cc6ccde75911f4_JaffaCakes118
-
Size
2.3MB
-
MD5
7b5f30044ab2cbd750cc6ccde75911f4
-
SHA1
59a0552173393916401116f86ac7a49b6d3e3fb3
-
SHA256
aa60be76ba26856b89f8195d48ccc9633a8f9f46bfd411c58b7e190c2d15b4a8
-
SHA512
ec9dd0752e456f4f5ed25c11a6f754844934e49bdda40ba981799a7da7864347e8d96ebdf63d7ee3901fe424a092cc2bd5951ab2c1eb4865ae43ca7fee983b59
-
SSDEEP
49152:6DV6yt/a2eQtxrODdMpA4ZnetgvJ9cNpCTd8db:6Doy3BtM4MteJ6NpCTd8db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b5f30044ab2cbd750cc6ccde75911f4_JaffaCakes118
Files
-
7b5f30044ab2cbd750cc6ccde75911f4_JaffaCakes118.exe windows:5 windows x86 arch:x86
93721cc6badfdf7a820a95ef9f90e96e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
VirtualAlloc
GetLastError
CloseHandle
GetSystemTime
FileTimeToLocalFileTime
ConnectNamedPipe
ReadFileScatter
CreateFileMappingW
GetModuleFileNameW
GetSystemDirectoryW
ReplaceFileW
FindCloseChangeNotification
GetConsoleWindow
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
SetLastError
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
FreeLibrary
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
DuplicateHandle
WaitForSingleObject
GetExitCodeThread
CreateThread
ExitThread
CreateTimerQueue
SetEvent
LoadLibraryW
oleaut32
CreateErrorInfo
SetErrorInfo
VarBstrFromBool
VarDateFromStr
SafeArrayUnaccessData
SafeArrayGetLBound
SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayGetUBound
user32
CharNextW
AppendMenuW
GetDC
AdjustWindowRect
ScreenToClient
IntersectRect
DrawIconEx
CreateIconIndirect
MapDialogRect
ModifyMenuW
secur32
DeleteSecurityContext
QuerySecurityPackageInfoW
GetUserNameExW
TranslateNameW
InitializeSecurityContextW
FreeCredentialsHandle
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lwsac8 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ