Static task
static1
Behavioral task
behavioral1
Sample
287000f2c20ea31ca7023c158af9dfde_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
287000f2c20ea31ca7023c158af9dfde_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
287000f2c20ea31ca7023c158af9dfde_JaffaCakes118
-
Size
123KB
-
MD5
287000f2c20ea31ca7023c158af9dfde
-
SHA1
bf0fc3166b5d9d6606add1103776c2c377e9107a
-
SHA256
a3c6e2cc6f2a8023ff71d948481dcde68a4139821081d0421f1affa27d845dad
-
SHA512
e87140203aac3cca8d3c75728dbee3a80243dbe32345d78a12a75c572b5bfdaf4bd5fc69b0532128eb34f757e74b9b5ae891dab40d1578215a77c7d02f62cc95
-
SSDEEP
1536:JiYSYz5EnE1EsNYA2JsmL9YgZnLkNuoexcAPU5wAcQgZ+f6aMSs6sBttsqqermc2:NFPegwsmBd4ughGaMpj7+qqeiVAzY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287000f2c20ea31ca7023c158af9dfde_JaffaCakes118
Files
-
287000f2c20ea31ca7023c158af9dfde_JaffaCakes118.exe windows:5 windows x86 arch:x86
2e130eda67570f5d580ab5d6b7050e36
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
GetLastError
CreateMutexA
VirtualAlloc
VirtualFree
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateProcessA
lstrcatA
GetModuleFileNameA
GetCommandLineA
lstrlenW
GetVolumeInformationA
FindFirstVolumeA
GetVersionExA
GetProcAddress
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetCurrentProcess
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
LCMapStringW
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
Sleep
GetModuleFileNameW
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
FlushFileBuffers
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
DecodePointer
EncodePointer
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
user32
TranslateMessage
DefWindowProcA
GetWindowLongA
DispatchMessageA
UpdateWindow
GetMessageA
RegisterClassExA
ShowWindow
PostQuitMessage
SetWindowPos
GetWindowRect
GetClientRect
SetWindowLongA
SetTimer
LoadIconA
LoadCursorA
GetSystemMetrics
CreateWindowExA
KillTimer
ole32
OleInitialize
CoCreateInstance
OleUninitialize
oleaut32
SysFreeString
SysAllocString
SysAllocStringLen
VariantClear
shlwapi
PathQuoteSpacesA
StrStrIA
urlmon
CoInternetSetFeatureEnabled
wininet
InternetConnectA
InternetOpenA
HttpOpenRequestA
HttpSendRequestA
InternetQueryDataAvailable
FindCloseUrlCache
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetCloseHandle
psapi
GetProcessMemoryInfo
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ