Static task
static1
Behavioral task
behavioral1
Sample
a86ba7b2d74e7d734c30d96d839fa093_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
a86ba7b2d74e7d734c30d96d839fa093_JaffaCakes118
-
Size
715KB
-
MD5
a86ba7b2d74e7d734c30d96d839fa093
-
SHA1
29ded5b62254cb3e2858953d27beb5599a451a88
-
SHA256
16e5c3b11d202d74cc723470ce9d68e9c166ebd1d4f7bac9ab782b910d17e2dc
-
SHA512
c873206cb541605656db650868c0f99c9717be31a79e7826e91e9775fcf807d3cb90d16604f54743e4dcd4a0e3652b3d91dae1ebf857f8d437317bfa006d43ec
-
SSDEEP
12288:/4Vcmjo5jAHA1Gzx2I38fuglVdqz2HpBkhjr5Kq0FOt:/N2oRq4LllVAzGyjr5KFs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a86ba7b2d74e7d734c30d96d839fa093_JaffaCakes118
Files
-
a86ba7b2d74e7d734c30d96d839fa093_JaffaCakes118.exe windows:5 windows x86 arch:x86
440d3db4faf888398573094fda651045
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetModuleHandleA
CloseHandle
DeleteFileA
GetFullPathNameA
GetThreadContext
GetCurrentThread
IsBadReadPtr
ExpandEnvironmentStringsA
WideCharToMultiByte
GetFileAttributesA
GetEnvironmentVariableA
MultiByteToWideChar
CreateDirectoryA
FindFirstFileA
CreateFileMappingA
RemoveDirectoryA
FindClose
LoadLibraryA
GetCurrentDirectoryA
GetCurrentProcessId
GetTempPathA
GetVolumeInformationW
MoveFileExA
CreateProcessW
SystemTimeToFileTime
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
GetLastError
GetTempFileNameA
GetLocalTime
SetLastError
WriteFile
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetProcAddress
CreateFileA
CreateFileW
HeapFree
HeapAlloc
GetCommandLineA
IsProcessorFeaturePresent
InterlockedDecrement
ExitProcess
GetModuleHandleExW
HeapSize
Sleep
GetStdHandle
GetModuleFileNameW
RaiseException
GetProcessHeap
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetConsoleMode
SetFilePointerEx
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
LoadLibraryW
LCMapStringW
GetStringTypeW
GetConsoleCP
SetStdHandle
FlushFileBuffers
WriteConsoleW
VirtualQuery
advapi32
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteExW
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ