Static task
static1
Behavioral task
behavioral1
Sample
0cc92caf0e7c744d95dfb11e61b1c472_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cc92caf0e7c744d95dfb11e61b1c472_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0cc92caf0e7c744d95dfb11e61b1c472_JaffaCakes118
-
Size
380KB
-
MD5
0cc92caf0e7c744d95dfb11e61b1c472
-
SHA1
4c9060f3a88c92a9c31b3dd0b9039d9a971b0958
-
SHA256
b60a6a8b00add37cca5e5d9f40a3b6a35725ee9225a182d50f27a46c3be626da
-
SHA512
2ce1ad3f20a7156faa76bffd8f29c5749d9c2836f113bd14e6e20f1ec572274cdfe390ca933cd30b71ed6f912deea648e9b74498aca065b2a8b70b3b715132df
-
SSDEEP
6144:gFXkPjS4odjSntj+zxKqjD210xbrze/Y/4/W4dFZXYYnO2jrmm2vf+0:gpOYSntj+zsaD2YrS/zW+FBz9Qx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc92caf0e7c744d95dfb11e61b1c472_JaffaCakes118
Files
-
0cc92caf0e7c744d95dfb11e61b1c472_JaffaCakes118.exe windows:4 windows x86 arch:x86
755d1a5d340dc17f90334601bb8e62a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
FileTimeToLocalFileTime
lstrlenW
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
LCMapStringW
GetLastError
InterlockedIncrement
TlsSetValue
GetFileType
GetTimeZoneInformation
FindNextFileA
CreateFileMappingA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
GlobalAlloc
GetVersion
InterlockedExchange
TerminateProcess
SetEnvironmentVariableA
CreateFileA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
HeapAlloc
GetSystemTime
SetLastError
InterlockedDecrement
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
SetStdHandle
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
GetConsoleOutputCP
GetStdHandle
GetCurrentThread
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStrings
TlsGetValue
GetEnvironmentVariableA
RtlUnwind
CreateProcessA
HeapCreate
FindResourceW
VirtualFree
Sleep
SetUnhandledExceptionFilter
VirtualAlloc
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
user32
SetCursor
CallWindowProcA
SystemParametersInfoA
DialogBoxParamA
MessageBoxA
SetForegroundWindow
GetDesktopWindow
TrackPopupMenu
LoadIconA
LoadCursorA
ClientToScreen
GetDlgItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetSystemMetrics
KillTimer
SetFocus
ReleaseDC
CreateWindowExA
GetWindowLongA
IsIconic
LoadStringA
TranslateMessage
EnableWindow
ShowWindow
DefWindowProcA
GetParent
DestroyWindow
SendMessageA
GetCursorPos
GetDC
PeekMessageA
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
version
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ