Static task
static1
Behavioral task
behavioral1
Sample
0000a6364ac668050002899cd7d0be0f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0000a6364ac668050002899cd7d0be0f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0000a6364ac668050002899cd7d0be0f_JaffaCakes118
-
Size
496KB
-
MD5
0000a6364ac668050002899cd7d0be0f
-
SHA1
de01119d6ae04bf73bdcf89b357678dd719bd7e0
-
SHA256
c6bc03a2865ae0206395b4a3a1d13b8783c087f454776b096b47411af62dad6d
-
SHA512
39c7225163a7a8f1bf731301f58e9f265ee2f6b0efdde77d8a52baf175cdc2190b59d08a5adcbfacc166430db221632d5f158478ab31025b2368861c6d2dff72
-
SSDEEP
12288:if9aFH8QnzRvd/jeoiDlYkJgWTks6kewL09uDbMwPYRS6rvVAD:i4FRP/aoUgrs6kew09IPISG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0000a6364ac668050002899cd7d0be0f_JaffaCakes118
Files
-
0000a6364ac668050002899cd7d0be0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
90c98269460f3108b8194978273258f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
DebugActiveProcess
HeapDestroy
GetFileType
ExpandEnvironmentStringsA
GetCurrentThreadId
DebugBreak
GetNumberFormatW
GetEnvironmentStringsW
EnterCriticalSection
InitializeCriticalSection
SetHandleCount
TlsFree
CompareStringW
GetModuleFileNameA
InterlockedDecrement
TlsGetValue
GetCalendarInfoA
InterlockedIncrement
GetLocalTime
InterlockedExchange
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
OpenMutexA
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
SetEnvironmentVariableA
FreeEnvironmentStringsW
VirtualFree
GetThreadSelectorEntry
VirtualQuery
TlsSetValue
GetStdHandle
GetStringTypeA
CreateWaitableTimerA
GetLastError
GetStartupInfoW
WriteFile
GetVersion
LCMapStringW
GetCommandLineW
VirtualAlloc
SetConsoleCursorPosition
SetLastError
GetModuleFileNameW
SetThreadIdealProcessor
RtlUnwind
DeleteFileA
ReadFile
VirtualFreeEx
EnumSystemLocalesA
FreeEnvironmentStringsA
DeleteCriticalSection
TerminateProcess
GetStringTypeW
GetCPInfo
GetTickCount
CreateMutexA
GetSystemTime
GetEnvironmentStrings
HeapCreate
MultiByteToWideChar
GetCommandLineA
HeapFree
GetTimeZoneInformation
GetConsoleOutputCP
EnumTimeFormatsW
TlsAlloc
IsBadWritePtr
WriteProfileSectionW
WritePrivateProfileStructA
QueryPerformanceCounter
LoadLibraryA
CloseHandle
HeapReAlloc
LocalUnlock
UnhandledExceptionFilter
SetFilePointer
ExitProcess
LCMapStringA
SetStdHandle
HeapAlloc
GetCurrentThread
GetProcAddress
LeaveCriticalSection
GetCurrentProcess
CompareStringA
user32
RegisterClassA
RegisterClassExA
BroadcastSystemMessageA
gdi32
SetROP2
Ellipse
GetGlyphOutline
EndDoc
EnumMetaFile
SetBoundsRect
wininet
FindNextUrlCacheEntryExW
FtpOpenFileA
HttpEndRequestW
InternetGetLastResponseInfoW
Sections
.text Size: 330KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ