Static task
static1
Behavioral task
behavioral1
Sample
94e5b657437a19295076b621bc59c809_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
94e5b657437a19295076b621bc59c809_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
94e5b657437a19295076b621bc59c809_JaffaCakes118
-
Size
2.1MB
-
MD5
94e5b657437a19295076b621bc59c809
-
SHA1
10d5904556a49635002ad31a3540cf89229a46c5
-
SHA256
7e29ad4726494a72a05bdfbf5597cc8010fdcb36155f867b46121d55663e6ca6
-
SHA512
8ba477f3b74dc46e013d8dabc6bbf08dd6947590714f0455c1c71e15aee916c472e9d2f215ac92df3a88033af9c64a618ef78fd80fae73312c1006365aa6e06b
-
SSDEEP
24576:mlWm9hzwJ+fXSmknpNQ1ksncG/PiOeh3Uv+SFgQKaUWKa2:mAm9h0kS1npqZc0ryW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94e5b657437a19295076b621bc59c809_JaffaCakes118
Files
-
94e5b657437a19295076b621bc59c809_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb7186365834072168b61f43570dca2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualAlloc
HeapAlloc
ExitProcess
FreeEnvironmentStringsW
WaitForMultipleObjects
GetCommState
SystemTimeToFileTime
TlsAlloc
TlsFree
CreateEventW
CreateFileMappingW
OpenFileMappingW
CreateProcessW
FindAtomW
CreateFileW
MoveFileW
GetDefaultCommConfigW
GetOEMCP
GetCPInfo
GetConsoleWindow
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GlobalFree
LCMapStringW
HeapSize
HeapReAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
GlobalLock
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
CloseHandle
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
user32
GetMenuCheckMarkDimensions
GetKeyboardLayoutList
GetMessageW
RealChildWindowFromPoint
WinHelpW
SetScrollInfo
LoadIconW
DestroyCursor
SetParent
SetWindowLongW
PtInRect
MapWindowPoints
GetScrollRange
LockWindowUpdate
InvalidateRect
TranslateMessage
SetMenuDefaultItem
GetMenuItemInfoW
TrackPopupMenu
GetUpdateRect
InsertMenuW
LoadAcceleratorsW
IsCharUpperW
CharUpperW
GetNextDlgTabItem
SetDlgItemInt
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsChild
RegisterClassExW
GetClassInfoW
GetMessagePos
winspool.drv
DeleteFormW
advapi32
RegQueryInfoKeyW
userenv
UnregisterGPNotification
mprapi
MprConfigGetFriendlyName
MprConfigInterfaceTransportEnum
MprConfigTransportGetInfo
MprConfigTransportGetHandle
MprConfigTransportDelete
MprConfigInterfaceCreate
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 669KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mm9wfe Size: 620KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a7ol Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.51ak7 Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pet4mi Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ