Static task
static1
Behavioral task
behavioral1
Sample
368b3849c06d97f32b0107784a592397_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
368b3849c06d97f32b0107784a592397_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
368b3849c06d97f32b0107784a592397_JaffaCakes118
-
Size
73KB
-
MD5
368b3849c06d97f32b0107784a592397
-
SHA1
556b2553075b03b1d17d3ae78fcafae3699d82b5
-
SHA256
17382b5fea3ff6245fbad8989730fa9d9c93f5cca4ba0d32206526314c8baef6
-
SHA512
fb21886d23d8d46db2c7f667156242a8a08d5e7e622f0850b6be50e894c35789cf359a44f5eeb756ec560522c64dadfe268600cd07a8cd6aa37c27706aacffc4
-
SSDEEP
1536:BBavxEBcA2jcgR9FPw5UvRN759AwNYMlBp1L5NXEZjJ:YxEBcA2IgReUIibrqjJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368b3849c06d97f32b0107784a592397_JaffaCakes118
Files
-
368b3849c06d97f32b0107784a592397_JaffaCakes118.exe windows:4 windows x86 arch:x86
43e1c01ea3824398b7ddec938c7a1229
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_initterm
_amsg_exit
_initterm
_XcptFilter
malloc
free
iswalpha
iswdigit
_vsnwprintf
wcschr
_wcsicmp
_j0
??0exception@@QAE@XZ
__RTDynamicCast
??1type_info@@UAE@XZ
memmove
_purecall
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_wcsnicmp
rand
iswspace
_wcsupr
_beginthreadex
_errno
_unlock
__dllonexit
_lock
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy
kernel32
GetProcessHeaps
InterlockedDecrement
InterlockedIncrement
HeapValidate
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
DeleteFileW
RemoveDirectoryW
SetEnvironmentVariableW
DisableThreadLibraryCalls
DebugBreak
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenEventW
CreateSemaphoreW
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
CreateDirectoryW
CreateTimerQueueTimer
ChangeTimerQueueTimer
DuplicateHandle
GetFileAttributesW
ExpandEnvironmentStringsW
GetCurrentThread
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsFree
TlsSetValue
HeapCreate
HeapSize
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime
gdiplus
GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ