Static task
static1
Behavioral task
behavioral1
Sample
07d880ac571b45e2d5d1a9649967f432_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
07d880ac571b45e2d5d1a9649967f432_JaffaCakes118
-
Size
215KB
-
MD5
07d880ac571b45e2d5d1a9649967f432
-
SHA1
d160eb0794451c3c3a8e3c52d4d569dde6edf55e
-
SHA256
3b04adcb5f5cb8727ab764fbd8c4d25b45dd82b9d7a7c44d4167269522ab387f
-
SHA512
969d51d5a3829fdf929f0d345f91baf65bdbb64a33b7c9e5d9b18b2f221a7919f4b905893e45f13db19206b7d28a5c45ef1c7c2ef2a0d2a2f1d3ccfeef374776
-
SSDEEP
3072:UxSHP/GNuSZGU1LDXDehxl/+Cgjv3o3Ir+1f5I/uUbYUVJIcNlMEmyrXdVHlm1yM:eePHXGv6h0wYrUmIpcNlMEl7dRlmPn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07d880ac571b45e2d5d1a9649967f432_JaffaCakes118
Files
-
07d880ac571b45e2d5d1a9649967f432_JaffaCakes118.exe windows:5 windows x86 arch:x86
f61a37f687adb04d936d7460754bab7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrlenA
lstrcmpiA
CloseHandle
WaitForSingleObject
CreateThread
GetSystemPowerStatus
GetLocaleInfoA
GetUserDefaultUILanguage
TerminateProcess
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetVersionExA
Sleep
GetProcAddress
LoadLibraryA
CreateMutexA
GetCurrentThreadId
GetCommandLineA
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
LCMapStringW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
CompareFileTime
CreateEventA
LCMapStringA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
RtlUnwind
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
HeapReAlloc
HeapCreate
ExitProcess
WriteFile
GetOEMCP
user32
PostThreadMessageA
ChangeDisplaySettingsExA
ChangeDisplaySettingsA
CharNextA
SetTimer
PostMessageA
RegisterWindowMessageA
CharNextW
KillTimer
PostQuitMessage
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
FindWindowA
RegisterDeviceNotificationA
DefWindowProcA
SendNotifyMessageA
EnumDisplaySettingsA
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
ole32
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoUninitialize
CoInitialize
CoSuspendClassObjects
StringFromGUID2
oleaut32
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SysAllocString
VariantClear
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE