Static task
static1
Behavioral task
behavioral1
Sample
14a22de990fc3932d99dcd4c7eb8045a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14a22de990fc3932d99dcd4c7eb8045a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14a22de990fc3932d99dcd4c7eb8045a_JaffaCakes118
-
Size
380KB
-
MD5
14a22de990fc3932d99dcd4c7eb8045a
-
SHA1
83fa1d2d5b3ef39302552ecd3da1a5f9f5e81d3f
-
SHA256
b346a511f8cb0ad4368855ec3eedfc64432d81988c433c82ddc2b0e27c5c090e
-
SHA512
d4175b044aba96a500d9940207d4aab0af872f3738ff2b06381346b9c509447d628d382b4b10ba3f587bbd93b206d0b2523e7447bb3c44d4b06f17a6d25fcc1b
-
SSDEEP
6144:aKNPbn3bNmc3F9Fs7RmtzPQb6WRmXkyEekzWu2:vBbEc3F9ySQ7mXkFe9u2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a22de990fc3932d99dcd4c7eb8045a_JaffaCakes118
Files
-
14a22de990fc3932d99dcd4c7eb8045a_JaffaCakes118.exe windows:4 windows x86 arch:x86
390ba51fac97a14b9e60b20baf26e2ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CreateEventA
DeleteCriticalSection
WaitForSingleObject
IsBadWritePtr
CloseHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
VirtualProtect
VirtualFree
GetCurrentThread
VirtualQuery
GetSystemInfo
RtlUnwind
GetLastError
GetLocalTime
VirtualAlloc
EnterCriticalSection
GetLocaleInfoA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapFree
LeaveCriticalSection
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
UpdateWindow
GetTopWindow
IsWindowUnicode
OpenIcon
IsWindowVisible
ShowWindow
SetTimer
gdi32
CreateHatchBrush
advapi32
EqualPrefixSid
psapi
GetModuleBaseNameA
GetWsChanges
msvfw32
ICGetInfo
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 563KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ