Static task
static1
Behavioral task
behavioral1
Sample
a2a018ee78590b6dfc96ad7d73789e84_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a2a018ee78590b6dfc96ad7d73789e84_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
a2a018ee78590b6dfc96ad7d73789e84_JaffaCakes118
-
Size
182KB
-
MD5
a2a018ee78590b6dfc96ad7d73789e84
-
SHA1
c13e2f1136318057d488c5115e7cf207fda382e4
-
SHA256
4fdffb9a9899f3a6c08ce850ae1d2ce31b3518a0386a8795380019822bdb74cd
-
SHA512
20f5fffce04c8d14950f9e350196193b262da3b88e16b99e6f917bb49609037cb03a2a7ebda22525282161b98bfe9298b039728bc99859fc221ce2271d35f6ce
-
SSDEEP
3072:2RrA1CuFi5x73kBZ+QKYs0+RunbMgvp6u92+YbP:u4CuUzQ0Qzs4bMgc5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2a018ee78590b6dfc96ad7d73789e84_JaffaCakes118
Files
-
a2a018ee78590b6dfc96ad7d73789e84_JaffaCakes118.exe windows:5 windows x86 arch:x86
c39cf7ade8ab077694e88bc57bf9db53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
LocalAlloc
GlobalMemoryStatus
GetCommProperties
GetCPInfo
GetModuleHandleA
GetWindowsDirectoryW
GetTempPathA
GetFileSizeEx
GetAtomNameW
GetFileInformationByHandle
AddAtomA
SetProcessAffinityMask
FatalExit
TerminateThread
GetProcessId
GetLongPathNameA
GetProcessWorkingSetSize
GetProcessTimes
SetProcessShutdownParameters
lstrlenA
CreateFileW
WriteConsoleW
SetStdHandle
GetLastError
ExitThread
GetProcessHandleCount
AddAtomW
LoadLibraryW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
HeapAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
user32
EnableScrollBar
GetScrollRange
advapi32
InitiateSystemShutdownA
GetUserNameW
OpenEventLogW
msimg32
GradientFill
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 1021KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ