Static task
static1
Behavioral task
behavioral1
Sample
00971154cea814b5bd665ca02dd00cd2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
00971154cea814b5bd665ca02dd00cd2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
00971154cea814b5bd665ca02dd00cd2_JaffaCakes118
-
Size
911KB
-
MD5
00971154cea814b5bd665ca02dd00cd2
-
SHA1
12ed06d593f131b0754bc93148ffb82886eaa3a5
-
SHA256
b2c26e4987434b125c59233e06c2bf3a7ec0593f9bc3a6ed0fd48ecb35367a89
-
SHA512
8e285dda846b051a9ae321e1eae5bfbeacbc4ce90c95a79f259ed57318eeb986ffb6532a150ee34e956d1aa727218875ae4241f8685080143ef352fa35fca7e0
-
SSDEEP
24576:Dqa4YvtUUZe3o5RJk4x/nlufcXRyN7hQbZ61:Dqa4eUUZeOiof4cMRN1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00971154cea814b5bd665ca02dd00cd2_JaffaCakes118
Files
-
00971154cea814b5bd665ca02dd00cd2_JaffaCakes118.exe windows:5 windows x86 arch:x86
926dd32da9d15b16375b452295163aac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htonl
kernel32
GetProcessTimes
GetCurrentProcess
GetThreadTimes
GetCurrentThread
GlobalMemoryStatus
QueryPerformanceCounter
LocalFree
LocalAlloc
OpenProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
FormatMessageA
GetFileType
CreateProcessA
SetHandleInformation
CreatePipe
CreateFileA
ClearCommBreak
SetCommTimeouts
SetCommState
GetSystemTime
GetOverlappedResult
GetEnvironmentVariableA
GetLocalTime
GetModuleHandleA
GetVersion
MultiByteToWideChar
FlushConsoleInputBuffer
CreateFileW
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAdjustment
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
GetSystemDirectoryA
GetVersionExA
GetLastError
GetCommState
WaitForSingleObject
SetEvent
CloseHandle
GetProcessHeap
CreateEventA
CreateThread
WriteFile
GetStdHandle
GetConsoleMode
SetConsoleMode
ReadFile
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
SetEndOfFile
SetCommBreak
GetTimeFormatA
GetDateFormatA
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
HeapFree
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
DeleteFileA
GetCommandLineA
SetConsoleCtrlHandler
ReadConsoleInputA
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapCreate
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
SetFilePointer
user32
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
FindWindowA
GetForegroundWindow
GetCapture
GetClipboardOwner
GetQueueStatus
GetCursorPos
advapi32
RegOpenKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegSetValueExA
RegCreateKeyA
GetLengthSid
CopySid
GetUserNameA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ