Static task
static1
Behavioral task
behavioral1
Sample
b5370c8514019231caf9ea6a4e31567d_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
b5370c8514019231caf9ea6a4e31567d_JaffaCakes118
-
Size
429KB
-
MD5
b5370c8514019231caf9ea6a4e31567d
-
SHA1
10d37348351e6802ab1bfb467afdce60c564c856
-
SHA256
e53a5a2326a957e0b875308e30f0d454277abe546d33e36c35b5963b7dbd130f
-
SHA512
8ade715717a06898efffa25777bdcfd1d955efd9586df12ea2f058c1c68a9b66545c2f21ec985b2cf57b970a3a3f1d4fe894ede9ccf38ef57ff0e2f1b4231ae7
-
SSDEEP
12288:aLcIRcifboSkksY38W7SJeO1vEEkmWU5YfxegHZwG2:aLhfikD8WGP1vzkWMxegHmG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b5370c8514019231caf9ea6a4e31567d_JaffaCakes118
Files
-
b5370c8514019231caf9ea6a4e31567d_JaffaCakes118.exe windows:5 windows x86 arch:x86
59bc1b9a0062595185740c56ce419001
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileSectionW
GetSystemDirectoryA
GetTimeZoneInformation
MultiByteToWideChar
lstrlenW
VirtualUnlock
SetThreadLocale
GetStdHandle
FindFirstFileExA
GetLongPathNameW
GetProcAddress
CreateJobSet
RemoveDirectoryA
PrepareTape
RegisterWaitForSingleObject
LocalAlloc
GetFileType
WritePrivateProfileStringA
SetConsoleMode
GetCurrentConsoleFont
WriteProfileStringA
lstrcmpiW
CreateMutexA
FindNextFileW
VirtualProtect
GetFileAttributesExW
OpenSemaphoreW
GetWindowsDirectoryW
GetThreadTimes
TlsFree
AreFileApisANSI
CreateThread
ReadConsoleW
ReadFile
SetEndOfFile
GetFileAttributesA
GetVolumePathNameW
ConvertFiberToThread
GetTickCount
GetModuleHandleW
GetCommProperties
GetComputerNameW
FindCloseChangeNotification
CreateJobObjectW
GetSystemWindowsDirectoryW
GlobalSize
DeleteVolumeMountPointA
DebugActiveProcessStop
CommConfigDialogA
lstrlenA
FreeResource
GetDateFormatW
HeapReAlloc
GetTempFileNameW
CreateFileMappingW
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
GetLastError
HeapFree
ExitProcess
GetModuleHandleExW
GetCommandLineW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
GetStartupInfoW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetProcessHeap
GetCurrentThreadId
HeapSize
CloseHandle
WriteFile
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
FlushFileBuffers
OutputDebugStringW
WriteConsoleW
CreateFileW
user32
HiliteMenuItem
GetMonitorInfoA
advapi32
OpenEventLogA
ConvertToAutoInheritPrivateObjectSecurity
RegEnumKeyExW
GetUserNameA
ReportEventA
RegQueryValueW
AddAuditAccessObjectAce
LookupAccountNameW
AdjustTokenGroups
RegEnumKeyExA
CreateProcessAsUserW
EqualSid
LookupPrivilegeNameA
OpenServiceW
RegQueryMultipleValuesW
ObjectPrivilegeAuditAlarmA
DeleteAce
RegSetValueA
CreateServiceW
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ