Static task
static1
Behavioral task
behavioral1
Sample
a3040592b48d79e96b86d6de29cd6fa8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a3040592b48d79e96b86d6de29cd6fa8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a3040592b48d79e96b86d6de29cd6fa8_JaffaCakes118
-
Size
841KB
-
MD5
a3040592b48d79e96b86d6de29cd6fa8
-
SHA1
ee55c8363dd024f5817129ccc34be772c536dd06
-
SHA256
c7221611f3346473da13ea36d6d81422118d46f0803d98bd5ccc0c547e815ace
-
SHA512
81965429b480fb5b960fe69d70889022e1048112149dd96529822447409d8b57e6a177161640132bf3dd6e2566ab6df594f3e2ff9a166854570004b87f2b67f9
-
SSDEEP
12288:BpcaixSO7wVNM2pW8CLOpNFh58waIK4nQlr6ESHFbPvrQkHJsaWcO215nk4:vcaYP7wzMLupNFTCOQ9kHtHJFWcOJ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3040592b48d79e96b86d6de29cd6fa8_JaffaCakes118
Files
-
a3040592b48d79e96b86d6de29cd6fa8_JaffaCakes118.exe windows:5 windows x86 arch:x86
389eca9fff0fabe274a541803a06eaaf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
GetThreadContext
CreateConsoleScreenBuffer
GetMailslotInfo
FlushFileBuffers
TlsGetValue
IsDBCSLeadByte
LocalAlloc
GetTempPathA
FindVolumeMountPointClose
GetConsoleOutputCP
VirtualProtect
CreateMailslotA
lstrlenW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
SetCommBreak
GetModuleFileNameW
SetDefaultCommConfigA
SetFileShortNameW
GetNumberOfConsoleMouseButtons
WriteProfileSectionA
GetConsoleCP
DosDateTimeToFileTime
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
RtlUnwind
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
SetConsoleCtrlHandler
FreeLibrary
IsValidLocale
SetConsoleOutputCP
user32
HiliteMenuItem
LoadAcceleratorsW
GetPropW
GetMenuInfo
RemovePropW
AppendMenuA
SetDlgItemInt
gdi32
AddFontResourceW
CreateICW
PolyDraw
ResetDCW
SetICMProfileA
GetGlyphOutlineA
TranslateCharsetInfo
ole32
CoIsOle1Class
OleSave
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ