Static task
static1
Behavioral task
behavioral1
Sample
b7d129ebfeae7500af0af17616ffb97d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b7d129ebfeae7500af0af17616ffb97d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
b7d129ebfeae7500af0af17616ffb97d_JaffaCakes118
-
Size
2.0MB
-
MD5
b7d129ebfeae7500af0af17616ffb97d
-
SHA1
1cbb2b03e65d704abd5c7aefa128d6bc755b966c
-
SHA256
bc11d29b1d609bca333d5ae40dfa095babc585b7cf2693bd46d3f1ec3a98d410
-
SHA512
2157cdfd097993811fc85989d9afe6b7cd989cf8f4ac566cfae601c9ec35dee0843e7b0407079dc1c241ad7504fc31f31d0456ee854c581f952ad5512e888137
-
SSDEEP
24576:1Q5vLJ0JbKNRNBeDjcFjXTL+jgnlzZlTC:K5TSJbAegRXTdnzE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7d129ebfeae7500af0af17616ffb97d_JaffaCakes118
Files
-
b7d129ebfeae7500af0af17616ffb97d_JaffaCakes118.exe windows:5 windows x86 arch:x86
439ed07ed2edc0ef2d833d1344f7968f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
EnumMonitorsW
kernel32
VirtualAlloc
HeapSize
ExitProcess
DeleteCriticalSection
WaitForMultipleObjects
SetHandleCount
SetFilePointer
GetSystemInfo
FormatMessageW
FlushViewOfFile
OpenFileMappingW
LoadLibraryExW
GetSystemDirectoryW
GetDiskFreeSpaceExW
CreateFileW
GetFileAttributesW
FindFirstFileW
IsBadStringPtrW
GetLocaleInfoW
EnumDateFormatsW
GetConsoleWindow
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapFree
OutputDebugStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
FreeEnvironmentStringsW
user32
DispatchMessageW
DefWindowProcW
RegisterClassW
FlashWindow
DeferWindowPos
IsIconic
EndDialog
SetDlgItemInt
CheckRadioButton
SendDlgItemMessageW
GetDialogBaseUnits
CloseClipboard
CharUpperW
SetFocus
GetActiveWindow
EnableWindow
GetMenu
CreateMenu
TrackPopupMenu
GetDC
InvalidateRect
GetClientRect
AdjustWindowRect
GetCursorPos
ScreenToClient
WindowFromPoint
SetRect
CreateIcon
SystemParametersInfoW
GetKeyboardLayout
advapi32
OpenSCManagerW
RegOpenKeyExW
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hnag1t Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4htto Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9orr84 Size: 755KB - Virtual size: 754KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4twvv Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ