Static task
static1
Behavioral task
behavioral1
Sample
31b71160ca62318afdc4b500295ae3cf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31b71160ca62318afdc4b500295ae3cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31b71160ca62318afdc4b500295ae3cf_JaffaCakes118
-
Size
136KB
-
MD5
31b71160ca62318afdc4b500295ae3cf
-
SHA1
00ac2721b56c72904ce2482ccd9eaffe5e8996b6
-
SHA256
cdc338bf1a7055154aa8d418c88a637ac3e9179ccb141dedf3c42917511ff646
-
SHA512
3431aec22e3835656553e83d494dab442c35d9383b9bbd0cc903a184049cd6cae61ff2e22965ececaa75a8aff18fb6f06e25114090690734cfcc2a3e741eb752
-
SSDEEP
1536:5/fMZ7Y9L1OKT61eTqUrtYv+owD5B3gwVYxK4Mg9Ri/Ypk+:xI1eTqUrtYv+AwVLg9RiYk+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31b71160ca62318afdc4b500295ae3cf_JaffaCakes118
Files
-
31b71160ca62318afdc4b500295ae3cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
27ad16162d0172cbd913c3a984d1134e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
ReleaseMutex
WaitForSingleObject
CreateMutexW
FlushFileBuffers
CreateFileA
FreeLibrary
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
DeleteCriticalSection
CloseHandle
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLocaleInfoA
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
RaiseException
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
user32
RegisterClassW
CreateWindowExW
SendMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
DefWindowProcW
FindWindowW
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyW
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ