Static task
static1
Behavioral task
behavioral1
Sample
8ba5bb718a79aba63afb2c817d8a8374_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ba5bb718a79aba63afb2c817d8a8374_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8ba5bb718a79aba63afb2c817d8a8374_JaffaCakes118
-
Size
261KB
-
MD5
8ba5bb718a79aba63afb2c817d8a8374
-
SHA1
783d498f56229b788b393d20639f708ec47ccca0
-
SHA256
f64795fb968b94fea4dadfd63c5a0d3e4a8d83535e74ad68ea23edd9885aa4f7
-
SHA512
db24ae281d48aeb068d9003a1e7956c8f55d92727d53b307de64e4766f8acdfc3baabed892a8b9bd5784eecfed4c2dfc3f713d34bc56c9eca59fc8ffc76e1f04
-
SSDEEP
6144:JJN276BRNUHwnpRAurKRXVkJTTPQaIte7G424PczDYR/:Jj2WBRNeCpzrKQfPQaImK4U3Yp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ba5bb718a79aba63afb2c817d8a8374_JaffaCakes118
Files
-
8ba5bb718a79aba63afb2c817d8a8374_JaffaCakes118.exe windows:5 windows x86 arch:x86
df8fbcfbe7758f169b588e4c561c82ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
SizeofResource
MultiByteToWideChar
InterlockedIncrement
LockResource
GetConsoleWindow
LoadResource
FindResourceW
lstrlenW
CreateFileMappingA
MapViewOfFile
GetSystemInfo
UnmapViewOfFile
VirtualAlloc
GetProcessHeap
lstrlenA
GetLastError
HeapValidate
IsBadReadPtr
GetModuleFileNameW
GetCommandLineA
HeapSetInformation
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetProcAddress
GetModuleHandleW
SetLastError
GetCurrentThread
RaiseException
HeapAlloc
GetModuleFileNameA
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
HeapCreate
HeapDestroy
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
RtlUnwind
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileW
CloseHandle
FlushFileBuffers
SetEvent
OpenEventA
FindResourceExW
user32
ShowWindow
MessageBoxW
ole32
CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitializeEx
oleaut32
SysFreeString
SysAllocString
advapi32
RevertToSelf
OpenThreadToken
SetThreadToken
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ