Static task
static1
Behavioral task
behavioral1
Sample
3224c96b9dfe77abf06f126d6f5a8d13_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3224c96b9dfe77abf06f126d6f5a8d13_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3224c96b9dfe77abf06f126d6f5a8d13_JaffaCakes118
-
Size
504KB
-
MD5
3224c96b9dfe77abf06f126d6f5a8d13
-
SHA1
fb15c47a26785b729ec9762c28cb3c2ece838abf
-
SHA256
d922cc87ba321b24f001869b10a2fce96e5e8a0ce8c90d83cae663ed4f323496
-
SHA512
91e67f55de6787377128a114208758ed4b426f43fb6b025f20c0fcdbec4aa38a1bf522d35fa55885d0a597b5771621efcb5afc86beb9fab6cee3ecde09a4f8cc
-
SSDEEP
12288:h8fhGr2ZlUFqwX/UhsRCvfGfZxHFC2/tq7N65SFBqAeWT:MZaFL8gefKZxl3SNT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3224c96b9dfe77abf06f126d6f5a8d13_JaffaCakes118
Files
-
3224c96b9dfe77abf06f126d6f5a8d13_JaffaCakes118.exe windows:4 windows x86 arch:x86
f624901653a14761287564e3f5d493a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InitializeCriticalSection
InterlockedExchange
GetProcessHeap
HeapDestroy
lstrcmpiW
GetProcessHeap
DisableThreadLibraryCalls
GetCurrentProcess
InterlockedIncrement
GetProcessHeap
InterlockedExchange
GetModuleFileNameW
LoadLibraryA
LeaveCriticalSection
GetProcessHeap
CloseHandle
VirtualAlloc
GetModuleFileNameW
CreateThread
LeaveCriticalSection
GetTickCount
HeapDestroy
GetSystemTimeAsFileTime
InterlockedExchange
GetCurrentProcess
InitializeCriticalSection
VirtualProtect
LocalFree
GetCurrentProcess
InterlockedIncrement
VirtualAlloc
HeapDestroy
LoadLibraryA
VirtualAlloc
InitializeCriticalSection
lstrcmpiW
InterlockedDecrement
lstrlenA
LoadLibraryW
LocalFree
GetModuleHandleA
CreateEventW
DisableThreadLibraryCalls
GetCurrentProcessId
VirtualProtect
InterlockedDecrement
DisableThreadLibraryCalls
GetCurrentProcessId
UnhandledExceptionFilter
EnterCriticalSection
DeleteCriticalSection
gdi32
BitBlt
SetBkMode
GetBkMode
SetPixel
BitBlt
CreateFontIndirectA
PatBlt
PatBlt
CreatePen
CreateDIBitmap
BitBlt
SetPixel
StretchBlt
SetBrushOrgEx
Rectangle
SelectObject
SetTextColor
SetWindowExtEx
GetBrushOrgEx
GetBrushOrgEx
Polygon
GetWindowExtEx
GetWindowExtEx
GetPixel
CombineRgn
CreateRectRgn
SetPixel
SetWindowExtEx
GetPixel
SetBrushOrgEx
SetTextColor
PatBlt
SetWindowExtEx
Rectangle
CreateBitmapIndirect
CreateRectRgn
GetBkMode
SetWindowOrgEx
GetBrushOrgEx
GetWindowExtEx
SetPixel
GetBkColor
BitBlt
LineTo
GetBrushOrgEx
SetWindowExtEx
SetWindowOrgEx
Ellipse
BitBlt
SetWindowExtEx
CreateSolidBrush
CreatePen
GetWindowExtEx
Rectangle
SelectObject
Sections
.text Size: 499KB - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ