Static task
static1
Behavioral task
behavioral1
Sample
7d61953bf34fe13eca5d3c82468bdada_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7d61953bf34fe13eca5d3c82468bdada_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
7d61953bf34fe13eca5d3c82468bdada_JaffaCakes118
-
Size
1.9MB
-
MD5
7d61953bf34fe13eca5d3c82468bdada
-
SHA1
0484c26903a83c7895b322f040b5c61f273104ac
-
SHA256
3076c164db8b4c419d1c9c6f11ecc33b9ed51c0ef93ed991f9046be2da5af005
-
SHA512
904e017bf4a3f9944a3a143752b3744fe31bde2755f35dbee2102d6ce1c2b1c54174ca942b4e7d925fa4e72af3ae245dbc100fa92c8080285fd46a0873a55f37
-
SSDEEP
49152:7WAlvGYN/5bFqnqao1bbrpa5IE7T3cPkcXd9NVRnov:NlvGYHbFRJbVmtXsPPTNVRo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d61953bf34fe13eca5d3c82468bdada_JaffaCakes118
Files
-
7d61953bf34fe13eca5d3c82468bdada_JaffaCakes118.exe windows:5 windows x86 arch:x86
6ce6449ce1ef740ec655b040a4d38592
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleW
LoadLibraryW
GetProcAddress
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetCurrentThreadId
GetStringTypeW
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
LCMapStringW
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ