Static task
static1
Behavioral task
behavioral1
Sample
b1094a923b3d8b0f656150e958683ce6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b1094a923b3d8b0f656150e958683ce6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b1094a923b3d8b0f656150e958683ce6_JaffaCakes118
-
Size
383KB
-
MD5
b1094a923b3d8b0f656150e958683ce6
-
SHA1
1ee072c1103d0b1b2750284f4c9eb1686d86802c
-
SHA256
9d6bc6e4160de2b643944978e6417707742e0d289dbf967bac789d79b67c920c
-
SHA512
73146d13efcc3f1050941f735477e49bfd90bb0f333acdd8364321b577bbe44f5eea1d795bece63102ae69f81a61cc4f61c3c0a8934d423500b4d54a143a5f16
-
SSDEEP
6144:xHjZ2Is0JM0PYvA9A5nfYV79Xjy+o8OcxO4aaXkDrG1zzauIdKGxHBU9:xHjZ2yJM0PQASVIxXGPcUBaX9WFQ8HB2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1094a923b3d8b0f656150e958683ce6_JaffaCakes118
Files
-
b1094a923b3d8b0f656150e958683ce6_JaffaCakes118.exe windows:5 windows x86 arch:x86
8fe562a90ba6ccd819043fa1a8482c6f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetSystemTimeAdjustment
GetCurrentProcess
TerminateProcess
GetProcessAffinityMask
GetSystemTimes
SetProcessShutdownParameters
GetProcessId
LocalAlloc
GetAtomNameW
ExitThread
GetFileInformationByHandle
CloseHandle
GetProcessIoCounters
GetThreadTimes
GetFileType
GetTickCount
CreateFileW
DecodePointer
EncodePointer
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetCurrentThread
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
RaiseException
winhttp
WinHttpConnect
WinHttpOpen
Sections
.text Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ