Static task
static1
Behavioral task
behavioral1
Sample
30ebafd3f032602abbfcf58fc40541f9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
30ebafd3f032602abbfcf58fc40541f9_JaffaCakes118
-
Size
585KB
-
MD5
30ebafd3f032602abbfcf58fc40541f9
-
SHA1
64007da94dcae08c811510e53ab8ca76ca69a0ed
-
SHA256
76baf5e9c097632e5d913118851790786d81fbe07e2c72fa049cc0329517bd00
-
SHA512
e3df8a65bd60d2fed52a6078bc3624c82dbd44538e8a2fbfcdb12dce84d43f945286a44831cac392d50b7b0ff554f3e420b22db2fd24bdad3eb4700caaea7815
-
SSDEEP
12288:yG2tzSMJb9pZ5RgY2yUNK+upN35jGFpVMbonpEPH0zEBQM1SoSbmKZG:yPxzKtrEPo2QfblG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30ebafd3f032602abbfcf58fc40541f9_JaffaCakes118
Files
-
30ebafd3f032602abbfcf58fc40541f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
49bf38748ada845c24d89ebbbb72326c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
LockResource
FindResourceExW
GetProcessHeap
GetModuleHandleA
GetComputerNameW
GetCommandLineW
CreateEventW
ResetEvent
SetEvent
ExitProcess
FreeLibrary
GetStringTypeW
LCMapStringW
WideCharToMultiByte
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetNativeSystemInfo
GetTimeZoneInformation
GetLocalTime
GetSystemInfo
GetCurrentThreadId
CloseHandle
Sleep
OpenEventW
GetCurrentProcessId
GetProcessVersion
IsProcessorFeaturePresent
GetModuleHandleW
GetLastError
OpenMutexW
GetTickCount
WaitForSingleObject
CreateMutexA
GetVersion
OpenMutexA
GetTempPathW
GetTempFileNameW
CreateFileW
GetSystemTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetStdHandle
IsDebuggerPresent
WriteFile
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
RtlUnwind
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
GetSysColorBrush
GetSystemMetrics
ReleaseDC
GetDC
GetFocus
GetDesktopWindow
DefWindowProcW
GetForegroundWindow
GetSysColor
DestroyWindow
GetCursor
CharNextW
gdi32
CreateRectRgn
CreateEllipticRgn
CreateRoundRectRgn
CombineRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
Rectangle
Ellipse
DeleteObject
DeleteDC
GetStockObject
CreatePen
advapi32
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 419KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ