Static task
static1
Behavioral task
behavioral1
Sample
22506d212cb61b248632c3759f4e0401_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22506d212cb61b248632c3759f4e0401_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22506d212cb61b248632c3759f4e0401_JaffaCakes118
-
Size
7.5MB
-
MD5
22506d212cb61b248632c3759f4e0401
-
SHA1
ac6066c8c627d749f886d6f33f0d7c5ada48bb30
-
SHA256
851a3bddd1bf999c4815ae861674feec93c091348c4db3b4b0d85d9cc91a3e3e
-
SHA512
4f8c91046e96847497e06ea498733a9deb7328a095bcfef44a8fe4e897fdf8a250d8bf4b0a640df277ad62bc975ad206afa1947b9ed54a523258ceccad234169
-
SSDEEP
196608:jTpyGMrsYxa5T9pXFFEKeQvDjmLm+NKwEt73w1M:jTpPZYkbETIjmLmYotc1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22506d212cb61b248632c3759f4e0401_JaffaCakes118
Files
-
22506d212cb61b248632c3759f4e0401_JaffaCakes118.exe windows:6 windows x64 arch:x64
c66c8c21c3f6de2a7239366b4060d4b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WriteProcessMemory
GetSystemTimeAsFileTime
LocalAlloc
GetModuleFileNameW
LocalFree
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
OpenClipboard
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
shell32
SHGetPathFromIDListA
ole32
CoInitialize
oleaut32
SysAllocString
imm32
ImmSetCompositionWindow
d3d9
Direct3DCreate9
wininet
HttpSendRequestA
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wxQ0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wxQ1 Size: 7.4MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ