Static task
static1
Behavioral task
behavioral1
Sample
b5fff9db18d353401fed6e63c3a284d8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b5fff9db18d353401fed6e63c3a284d8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b5fff9db18d353401fed6e63c3a284d8_JaffaCakes118
-
Size
1.3MB
-
MD5
b5fff9db18d353401fed6e63c3a284d8
-
SHA1
c04b1a3f0980e9aeaec5400797d81f46e8e8750a
-
SHA256
34a2c9851b4e30218a5c36afbb7f6bfd6d15e34e18e17170f3fca72e45de16bf
-
SHA512
ec0ed5fa99701f93c6b4a5f2e148a83b5398310693236942cd1b08aa068a2c372c0f06575498564a00d45161c8d74b703c051044bd230d1c62f1f8057bd59a66
-
SSDEEP
24576:7aAHeQf5kn0rrPCQcgkvk3U0QNYcO6u/6t9/:7aMrzf+k3LQNYp6I6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5fff9db18d353401fed6e63c3a284d8_JaffaCakes118
Files
-
b5fff9db18d353401fed6e63c3a284d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb5d5e2b34079cd81aa8e41de3c856ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointerEx
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
WriteConsoleW
DecodePointer
CreateEventA
GetSystemTimeAsFileTime
OpenEventA
GetModuleHandleA
GetTickCount
WaitForSingleObjectEx
WaitForMultipleObjectsEx
ReleaseSemaphore
Sleep
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
SetEvent
ResetEvent
SetWaitableTimer
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
SystemTimeToFileTime
LocalFree
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EncodePointer
RaiseException
RtlUnwind
GetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExW
SetLastError
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetACP
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
user32
GetDC
ReleaseDC
gdi32
DeleteDC
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
Sections
.text Size: 799KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ