Static task
static1
Behavioral task
behavioral1
Sample
2233090b4a54c4dc331a8caf944347b2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2233090b4a54c4dc331a8caf944347b2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2233090b4a54c4dc331a8caf944347b2_JaffaCakes118
-
Size
516KB
-
MD5
2233090b4a54c4dc331a8caf944347b2
-
SHA1
55f9e44dc6e69fa906c2a9ba88c6a23fbf334be2
-
SHA256
58a91a8758419626da04ac4048ad968e4e2999c628c79d66fda0e2bd382a398a
-
SHA512
23039d6b53b3e5c8892f3dc5ed9f8d45ab724f177cf3dd8da09ec60472fee62aa66e726f45ebdfe824e0ad0185d92daf657e849ed66631fe53a1d6453cb3ff97
-
SSDEEP
6144:9ZCLB8yCMwOy6F5k1HJl1083neD5KG/PBmZHqefgGUuhG6/mdk9Pet3Ztslx2S7P:ONC/x3n4KoBAqSUgG6/kkCSx74Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2233090b4a54c4dc331a8caf944347b2_JaffaCakes118
Files
-
2233090b4a54c4dc331a8caf944347b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
385a294e4bdd6db4f629f5b03c03efc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetVersion
GetTickCount
CreateFileA
TlsSetValue
GetFileType
Sleep
VirtualFree
WriteFile
UnmapViewOfFile
InitializeCriticalSection
TerminateProcess
HeapAlloc
HeapReAlloc
CloseHandle
GetCurrentProcess
InterlockedExchange
GetModuleHandleA
GetStringTypeA
GetFileAttributesA
GetTempPathA
SetStdHandle
GetProcAddress
FreeEnvironmentStringsW
GetStartupInfoW
MultiByteToWideChar
DeleteFileA
LockResource
GetCurrentProcessId
GetPrivateProfileStringA
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetModuleFileNameA
LoadLibraryA
ExitProcess
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameW
GetSystemInfo
ReleaseMutex
LCMapStringW
GetLastError
VirtualAlloc
GetCommandLineA
UnhandledExceptionFilter
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
user32
GetClientRect
GetCursorPos
GetSysColor
PostMessageA
IsIconic
SetCursor
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 464KB - Virtual size: 463KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE