Static task
static1
Behavioral task
behavioral1
Sample
1c02ef754885438ace5a3d0dc2b375a2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c02ef754885438ace5a3d0dc2b375a2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c02ef754885438ace5a3d0dc2b375a2_JaffaCakes118
-
Size
102KB
-
MD5
1c02ef754885438ace5a3d0dc2b375a2
-
SHA1
72f85714ae3be2a5accfba58ce53f3737dc9fa5c
-
SHA256
c0399cb8301317402992cb29b446b563620d692d57f989584525b30b75f59131
-
SHA512
f08fa41f13d9a70ebba70623056e2f9c80adf227d554d2396517aeb0c29096b4fdead662858de0549838eec1ca834c353b405842b580432be3502f87f8ce07e7
-
SSDEEP
3072:3umxfw6dSziZ1Aha4zaBJkCnvoum7/0+:ttwOSyOa4+B+r70+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c02ef754885438ace5a3d0dc2b375a2_JaffaCakes118
Files
-
1c02ef754885438ace5a3d0dc2b375a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
9949f3fdf5afd871c7dafe13dfea33ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetTimeZoneInformation
CreateFileA
DeleteFileA
OutputDebugStringA
Sleep
GetLastError
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
CreateDirectoryA
GetProcAddress
CloseHandle
GetExitCodeProcess
CreateProcessA
HeapReAlloc
RtlUnwind
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InterlockedDecrement
InterlockedIncrement
RaiseException
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
IsBadWritePtr
HeapSize
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FlushFileBuffers
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
ReadFile
user32
WaitForInputIdle
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateMessage
DispatchMessageA
EndDialog
SetTimer
CreateDialogParamA
DestroyWindow
DialogBoxParamA
MessageBoxA
SetForegroundWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SendMessageA
GetDlgItem
gdi32
DeleteObject
CreateFontA
comctl32
ord17
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ