Static task
static1
Behavioral task
behavioral1
Sample
9ed48728839b832f701af858a7a8651c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9ed48728839b832f701af858a7a8651c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9ed48728839b832f701af858a7a8651c_JaffaCakes118
-
Size
109KB
-
MD5
9ed48728839b832f701af858a7a8651c
-
SHA1
79fc7bd26db81678d6d34602cfd0a6eb0f2cae6d
-
SHA256
94f32627efcef0e5665f70ffd7667dcb3513e2060522ea460315ffcfc8c9728d
-
SHA512
afb611d260a5599869bc8f07c6cad9e156ea237b5f410ce5f57097aa9df4cb14ae4806242c49959ebf16df03c7d0392a7aebc02d4a72a9351fc8a34e492c0be8
-
SSDEEP
1536:lswb6bEF2Yuposg+N0wATqsmfOuwAXLjSsP9UKFxnXeqkIYGnUWbXegepUGK:iOZ2Yns50BzmfeA/l63uxUWbXegepUR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ed48728839b832f701af858a7a8651c_JaffaCakes118
Files
-
9ed48728839b832f701af858a7a8651c_JaffaCakes118.exe windows:5 windows x86 arch:x86
e33229a1aca97f02759978dcd5378937
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantClear
VariantInit
SysFreeString
SysAllocString
iphlpapi
GetAdaptersInfo
advapi32
RegOpenKeyExW
GetUserNameW
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDestroyHash
RegCloseKey
RegCreateKeyExW
RegSetValueExA
RegQueryValueExW
CryptGetHashParam
ole32
CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitializeEx
kernel32
SetEndOfFile
ReadFile
GetEnvironmentStringsW
CreateFileW
CreateFileA
WriteConsoleW
FlushFileBuffers
GetProcAddress
GetModuleHandleA
WaitForSingleObject
GetCurrentProcess
ExpandEnvironmentStringsW
GetProcessHeap
LoadLibraryA
MoveFileExW
HeapAlloc
GetVolumeInformationW
GetSystemDirectoryW
GetLastError
GetVersionExA
CopyFileExW
GetVolumeInformationA
GetWindowsDirectoryA
lstrcpyA
InterlockedDecrement
lstrcatA
GetSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
GetVersionExW
HeapReAlloc
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
GetCommandLineW
HeapSetInformation
GetSystemTimeAsFileTime
HeapFree
RtlUnwind
EncodePointer
DecodePointer
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
SetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
GetConsoleCP
GetConsoleMode
Sleep
HeapSize
LoadLibraryW
SetFilePointer
CompareStringW
SetEnvironmentVariableA
LCMapStringW
GetStringTypeW
user32
wsprintfW
wsprintfA
winhttp
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpReadData
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ