Static task
static1
Behavioral task
behavioral1
Sample
9ddf39be2751479721283781e734eafc_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9ddf39be2751479721283781e734eafc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
9ddf39be2751479721283781e734eafc_JaffaCakes118
-
Size
519KB
-
MD5
9ddf39be2751479721283781e734eafc
-
SHA1
b30ec138297ba8e59aab88f1c7b47e97c74b6409
-
SHA256
e366dd35758d40fde92b3b26fba00bab93757019a4762108eb1083753aa34443
-
SHA512
c4f39b0d960240cfa103591de4e55e0ca875df13f9d4b390342e49c4d5fd7c9e6c4ae180d0ced7e87cbe2d7a2cc4ecc4b13dba96f25b60f49ebad65a97cfcf4c
-
SSDEEP
6144:1Jj0xNR+JUQWS6KOhaoO9D00qF+8W0qFul7X0qFk7Mpc0qFAlLVK0qFk7O0q71u:L0xNOP6dhaoXyilDCMm8lLkCO0q71u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ddf39be2751479721283781e734eafc_JaffaCakes118
Files
-
9ddf39be2751479721283781e734eafc_JaffaCakes118.exe windows:5 windows x86 arch:x86
f45ff67f97b379b9cff3a7936a96ab93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpyA
GetTempPathA
lstrcatW
LockResource
LoadResource
ExitProcess
FindResourceA
lstrcpyW
lstrlenW
ReadFile
GetFileSize
CreateFileW
GetModuleFileNameW
GetCommandLineW
SetEndOfFile
SizeofResource
CloseHandle
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RtlUnwind
RaiseException
WideCharToMultiByte
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
LCMapStringW
MultiByteToWideChar
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
IsProcessorFeaturePresent
HeapSize
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
HeapCreate
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
WriteConsoleW
SetStdHandle
GetProcessHeap
user32
MessageBoxA
advapi32
RegCloseKey
Sections
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ