Static task
static1
Behavioral task
behavioral1
Sample
070aae9f4ac7e50d7e05e9e3cd64ff7e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
070aae9f4ac7e50d7e05e9e3cd64ff7e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
070aae9f4ac7e50d7e05e9e3cd64ff7e_JaffaCakes118
-
Size
32KB
-
MD5
070aae9f4ac7e50d7e05e9e3cd64ff7e
-
SHA1
03e73152eb90786bf9143964da68a924b7dcfa5b
-
SHA256
d4468ad649c132cc1b71da0f23a092544b80f540c3537cee8656030bd12b7da8
-
SHA512
7bcd1ea2fd1b8278cdae7728236d54e41085a0049c0b9b5311c0542f8e8301878c49fff08da9e6a22f0673a83b6ac216f7fbed8315f6dd6ac2bc95c3cf56506f
-
SSDEEP
384:QJukHejua/QCWZRZQ6HOtr3BpdcT2Sx51rlanV2iPfPLr0Ly7ASSnSE:QJHVa4ZRZQ6HMr3BvUhlaJfPLr0u7ddE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 070aae9f4ac7e50d7e05e9e3cd64ff7e_JaffaCakes118
Files
-
070aae9f4ac7e50d7e05e9e3cd64ff7e_JaffaCakes118.exe windows:5 windows x86 arch:x86
cbff4725949770143821dfb669663383
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
GetCurrentProcess
GetTickCount
SetThreadPriority
GetCurrentThread
InitializeCriticalSection
DeleteCriticalSection
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
lstrlenA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualFree
UnmapViewOfFile
VirtualAlloc
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
Sleep
FreeLibrary
CreateProcessA
ExpandEnvironmentStringsA
GetTempPathA
ExitProcess
CopyFileA
GetFileAttributesA
GetFullPathNameA
lstrcatA
GetSystemDirectoryA
DeleteFileA
GetLastError
GetCommandLineA
GetVersionExA
lstrcpyA
WriteProcessMemory
OpenProcess
GetCurrentProcessId
HeapAlloc
GetProcessHeap
HeapFree
LocalFree
GetComputerNameA
LocalAlloc
OutputDebugStringA
CreateFileA
WriteFile
ReadFile
CloseHandle
CreateMutexA
WaitForSingleObject
SearchPathA
ReleaseMutex
user32.d
DefWindowProcA
RegisterClassA
wsprintfA
wvsprintfA
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plugins Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ