Static task
static1
Behavioral task
behavioral1
Sample
9154d9765191ff2c637975f202ffe7af_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9154d9765191ff2c637975f202ffe7af_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
9154d9765191ff2c637975f202ffe7af_JaffaCakes118
-
Size
1.2MB
-
MD5
9154d9765191ff2c637975f202ffe7af
-
SHA1
599e88c94594c70d8d46215c47474e63913e6c0b
-
SHA256
9aab17c5d213bdd6a7fda8b064ebc5cd908aca1dafec8dd472e085bb529e520d
-
SHA512
b64739c35080f2c44de71cc5c558c303b6fb1db63cac2c266d6e9f6d175d6aafa7fd34ed33c5e672134ddea1e97f10530ad565732f1628a3c94f41be94874814
-
SSDEEP
12288:dBfBehB5VWJw1mBfraQq0YEhL2WxwAp+lxyxKqnY5DsIjCfdA4w0E/g+rd:dBfBehB5VWJHhr1pYyFp+YoYBdQrd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9154d9765191ff2c637975f202ffe7af_JaffaCakes118
Files
-
9154d9765191ff2c637975f202ffe7af_JaffaCakes118.exe windows:5 windows x86 arch:x86
3e0434b4c3911b4b96eb8694261e378e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
VirtualProtect
GetSystemTimeAsFileTime
OpenEventA
GetModuleHandleA
GetTickCount
WaitForSingleObjectEx
WaitForMultipleObjectsEx
ReleaseSemaphore
Sleep
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
SetEvent
ResetEvent
SetWaitableTimer
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
SystemTimeToFileTime
LocalFree
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EncodePointer
RaiseException
RtlUnwind
GetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExW
SetLastError
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetACP
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1023KB - Virtual size: 1022KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ