Static task
static1
Behavioral task
behavioral1
Sample
ac9e165b346ed94157a95ee1bd2c9b35_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ac9e165b346ed94157a95ee1bd2c9b35_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
ac9e165b346ed94157a95ee1bd2c9b35_JaffaCakes118
-
Size
1.1MB
-
MD5
ac9e165b346ed94157a95ee1bd2c9b35
-
SHA1
7435b86d7b5c690b6bb566682763cf6a95cf2896
-
SHA256
f7e1e9074f56249bd1ea9970ad9ba8b533e68b31854925d2508a2adf4504c7da
-
SHA512
23a5a55c604104165355fae5574428946ad31eefb8d217c5830afdb7370450d41c81b5624f0652dbb5f9a29101eaa8ce90074d434cc9598301a4aa4ffa2d6e5c
-
SSDEEP
24576:zj4KUYkx3a57D6r6Sz1/86EtWUUmytQLcvs2FKn3:lUYs3a57D+L86EtWUUkws2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac9e165b346ed94157a95ee1bd2c9b35_JaffaCakes118
Files
-
ac9e165b346ed94157a95ee1bd2c9b35_JaffaCakes118.exe windows:5 windows x86 arch:x86
56fa2e9f0c005daf14a52af4cb956f53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EncodePointer
RaiseException
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
gdi32
CreateBrushIndirect
CreateHalftonePalette
CreateFontW
CreatePalette
SetDIBitsToDevice
ColorCorrectPalette
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 530KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idt Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 476KB - Virtual size: 475KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ