Static task
static1
Behavioral task
behavioral1
Sample
96b96e12da7561dbc1a90d5f475224fa_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
96b96e12da7561dbc1a90d5f475224fa_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
96b96e12da7561dbc1a90d5f475224fa_JaffaCakes118
-
Size
1.0MB
-
MD5
96b96e12da7561dbc1a90d5f475224fa
-
SHA1
d374327b5818b4c8f7aa4a4e445baded42966847
-
SHA256
f007ca8326a5202c3ecc04c492ad1ed5ef90db764215df7cc87a07b250ae50ce
-
SHA512
932b6fcb0fe86daab28df8d91904adebd43d806de93ac739854c63f48ddef1d3c2bae0802753075257c095a83e09265e15a1096b63f5314c074a4bf054aa26e6
-
SSDEEP
24576:jmBxwQXD0lyZNeNJg/oTcJk7fBFIQGrUmt:jmBj0yuJypJ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96b96e12da7561dbc1a90d5f475224fa_JaffaCakes118
Files
-
96b96e12da7561dbc1a90d5f475224fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
62fdd59c93c15555f3bcaa0dc59fd0cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
CreateErrorInfo
GetErrorInfo
SetErrorInfo
VarNeg
VarBoolFromStr
VarBstrFromBool
VarCyFromStr
VarI4FromStr
VariantChangeTypeEx
VariantChangeType
VariantCopyInd
VariantInit
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayCreate
SysStringLen
kernel32
GetFileType
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
HeapAlloc
OutputDebugStringW
RtlUnwind
GetProcAddress
GlobalLock
GlobalUnlock
VirtualAlloc
HeapReAlloc
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
SetEndOfFile
FindClose
CloseHandle
GetSystemTimeAsFileTime
FormatMessageW
FindResourceExW
GetTempPathW
FindFirstFileW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
CreateFileW
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ht8lh7 Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5dlfo4 Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ