Static task
static1
Behavioral task
behavioral1
Sample
a083dae34224c3516cc6d8fd8364c530_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a083dae34224c3516cc6d8fd8364c530_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a083dae34224c3516cc6d8fd8364c530_JaffaCakes118
-
Size
2.1MB
-
MD5
a083dae34224c3516cc6d8fd8364c530
-
SHA1
461f74101a27504c564081253698564ee21e075e
-
SHA256
0612a67bccb7c824364b6bb52c8ecff3dbf019cd82e34dcc2b9a4138a004f8fb
-
SHA512
3011c423cd7c4e2ee9f7f179a1ccf009070f1c98fc3429b5d05075b67f474fc762b30f191a8c215d7e2d10c2aec25362392b17b7b8f30241379527361746e948
-
SSDEEP
24576:6PSJvQV6J0B+K50my2DKyhvUSe0D1QNDBhrB6JvF7:6Pqv1J010l2K1SwDBWJx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a083dae34224c3516cc6d8fd8364c530_JaffaCakes118
Files
-
a083dae34224c3516cc6d8fd8364c530_JaffaCakes118.exe windows:5 windows x86 arch:x86
b19353481cf2ba1bad682f68ca1168c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GlobalUnlock
VirtualAlloc
GetEnvironmentStringsW
GetLastError
InitializeCriticalSection
GetSystemTime
GetLocalTime
GetSystemInfo
GetTimeZoneInformation
FileTimeToDosDateTime
FormatMessageW
CreateFileMappingW
LoadLibraryExW
GetModuleHandleW
GetCommandLineW
ExpandEnvironmentStringsW
FindResourceW
GetTempPathW
GetDiskFreeSpaceExW
FindFirstFileW
GetVersionExW
GetOEMCP
GetLocaleInfoW
GetStringTypeW
GetConsoleWindow
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
OutputDebugStringW
HeapFree
RaiseException
IsProcessorFeaturePresent
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsDebuggerPresent
IsValidCodePage
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
CreateFileW
user32
GetProcessWindowStation
GetMonitorInfoW
SystemParametersInfoW
TranslateMDISysAccel
DrawIconEx
GetTopWindow
EqualRect
MessageBeep
GetWindowRect
GetClientRect
GetDC
SetMenuDefaultItem
CheckMenuItem
GetSystemMenu
GetMenu
ToAscii
SetWindowPos
ShowWindow
IsWindow
winscard
SCardFreeMemory
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 976KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.6ras Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4a9h Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2wgua Size: 330KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ