Static task
static1
Behavioral task
behavioral1
Sample
0ee0f7fd55843d1ef7c9d6396bbcb99b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ee0f7fd55843d1ef7c9d6396bbcb99b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0ee0f7fd55843d1ef7c9d6396bbcb99b_JaffaCakes118
-
Size
926KB
-
MD5
0ee0f7fd55843d1ef7c9d6396bbcb99b
-
SHA1
0d8f41fe09dbd75ab953f9e64a6cdbbbc198bf2b
-
SHA256
a8200a476f72ef77f4cd6bd71ebae9f473e923b140600b9da0bbaf1f22e1cecb
-
SHA512
3362487f490968837a95844cf071951757800ee62328644f27d5ebd5b1ae95a0c8b82a56460628f47be4e0bd3e78fd2ad205dd2e3834aea4d271b1d6bf78aacb
-
SSDEEP
12288:7qX513h6F/ND4SO8ZSLLnDfXO0uXxb3BYMlodb28:E5dc7O/z+0uXxb3B3mb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee0f7fd55843d1ef7c9d6396bbcb99b_JaffaCakes118
Files
-
0ee0f7fd55843d1ef7c9d6396bbcb99b_JaffaCakes118.exe windows:5 windows x86 arch:x86
9411e4ab1500ae4eda93472788599ebe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetTickCount
Sleep
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
ExitThread
FormatMessageA
LocalFree
CreateWaitableTimerA
SetWaitableTimer
ResumeThread
ResetEvent
OpenEventA
GetSystemInfo
SetEnvironmentVariableA
CompareStringW
CreateFileW
GetDriveTypeW
SetEndOfFile
FreeLibrary
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetProcessHeap
WaitForMultipleObjects
ReleaseSemaphore
DuplicateHandle
HeapAlloc
CreateEventA
CloseHandle
GetCurrentProcess
HeapFree
CreateSemaphoreA
WaitForSingleObject
SetEvent
GetSystemTimeAsFileTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
ReadFile
DeleteFileA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
WriteFile
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
FatalAppExitA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetConsoleCtrlHandler
LoadLibraryW
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
CreateFileA
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
GetStringTypeW
HeapSize
GetACP
GetOEMCP
CreateThread
user32
EndPaint
DestroyWindow
GetMessageA
RegisterClassExA
PostQuitMessage
LoadStringA
LoadIconA
BeginPaint
TranslateMessage
CreateWindowExA
TranslateAcceleratorA
EndDialog
DefWindowProcA
LoadAcceleratorsA
ShowWindow
DispatchMessageA
UpdateWindow
LoadCursorA
DialogBoxParamA
Sections
.text Size: 342KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 521KB - Virtual size: 530KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ