Static task
static1
Behavioral task
behavioral1
Sample
8541c3e5a2fea353fab1657575993319_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8541c3e5a2fea353fab1657575993319_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8541c3e5a2fea353fab1657575993319_JaffaCakes118
-
Size
534KB
-
MD5
8541c3e5a2fea353fab1657575993319
-
SHA1
95383648af291e339dfa628a3950686e822e93d5
-
SHA256
4897564a8c3fd201eb272b044f8c17a2518e6cc10fa6d1bbff806b4f012805ec
-
SHA512
0ce82bf2397186e93d1f5f0f66576536dd66462d940b781a8e0f0e52041d3d3ca604dbfd15a3c4ee196780ecf23d9145edb997d9927a9f2261aaecb305ab7fe4
-
SSDEEP
12288:8urQ2eY45lYMxuqLOjy9lmbCKyBXUe7S/kVpprgPs:nGlY8xheO/ke7SaR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8541c3e5a2fea353fab1657575993319_JaffaCakes118
Files
-
8541c3e5a2fea353fab1657575993319_JaffaCakes118.exe windows:5 windows x86 arch:x86
6d27ce7aa4501fa57838f91c529eb7be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateFileMappingA
CreateDirectoryA
GetThreadPriorityBoost
GlobalGetAtomNameA
GlobalDeleteAtom
GetVolumeNameForVolumeMountPointA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
IsProcessorFeaturePresent
HeapAlloc
ExitProcess
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
SetStdHandle
SetFilePointer
WriteConsoleW
HeapSize
LoadLibraryW
HeapReAlloc
CreateFileW
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ