Static task
static1
Behavioral task
behavioral1
Sample
101bacd7c5aac7e0bcd61f2d9d5ce5ff_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
101bacd7c5aac7e0bcd61f2d9d5ce5ff_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
101bacd7c5aac7e0bcd61f2d9d5ce5ff_JaffaCakes118
-
Size
270KB
-
MD5
101bacd7c5aac7e0bcd61f2d9d5ce5ff
-
SHA1
9414481ac80701c213e7ae130c56c43af0d8bb12
-
SHA256
7d3b3618f7d8eef9f4e9f6614f7be9f016f95d6f19cd074a8fa03f5cf2f4a151
-
SHA512
f961428719fd507e73b802d9617fd2f71e7cd371ca8e65c5887bee95335146bc87ae8ced2e2e7b5636c07dd293c418025f9ddb3835a0b7bf990db571b46c6c39
-
SSDEEP
6144:LG0w4rrdhvh9Bc/byJT5E17pn2Hhru9dLP/sBPA/g:Lw4vRl07V+y9WhA/g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101bacd7c5aac7e0bcd61f2d9d5ce5ff_JaffaCakes118
Files
-
101bacd7c5aac7e0bcd61f2d9d5ce5ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f14388db1fdededc7bbb820347d9522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
CreateFileW
LeaveCriticalSection
GetProcessHeap
EnterCriticalSection
FindResourceExW
LoadResource
HeapFree
HeapSize
UnhandledExceptionFilter
lstrcmpiA
GetCurrentThreadId
FreeLibrary
HeapReAlloc
LoadLibraryExW
GetLocalTime
SetUnhandledExceptionFilter
CloseHandle
LockResource
DeleteCriticalSection
ReadFile
LocalAlloc
LocalFree
RaiseException
HeapDestroy
GetStdHandle
GetSystemTimeAsFileTime
FormatMessageW
FindResourceW
GetFileSizeEx
SizeofResource
WriteFile
HeapAlloc
lstrcmpA
IsDebuggerPresent
SetFilePointerEx
VirtualAllocEx
GetModuleHandleA
advapi32
GetTraceEnableLevel
UnregisterTraceGuids
RegQueryValueExW
RegOpenKeyExW
GetTraceLoggerHandle
RegCloseKey
ControlTraceW
RegisterTraceGuidsW
TraceEvent
GetTraceEnableFlags
shlwapi
PathAddBackslashW
PathFileExistsW
PathStripPathW
winspool.drv
SetPrinterW
AdvancedSetupDialog
DeletePrinterConnectionW
PerfOpen
EXTDEVICEMODE
EnumPrinterDriversW
DevicePropertySheets
EnumFormsW
EnumPortsA
DeviceCapabilities
StartPagePrinter
DevQueryPrint
oledlg
OleUIObjectPropertiesA
OleUIChangeIconW
OleUIAddVerbMenuW
Sections
.QwfR Size: 1KB - Virtual size: 37KB
IMAGE_SCN_MEM_READ
.EAeKTf Size: 3KB - Virtual size: 13KB
IMAGE_SCN_MEM_READ
.ITOkSwi Size: 3KB - Virtual size: 30KB
IMAGE_SCN_MEM_READ
.EeYFtGi Size: 1024B - Virtual size: 29KB
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pJUewT Size: 1024B - Virtual size: 799B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Ywuy Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ipAxoYi Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LVTVh Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yLDaz Size: 1024B - Virtual size: 751B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sJDw Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aKRpo Size: 1024B - Virtual size: 685B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XvvGFf Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ