Static task
static1
Behavioral task
behavioral1
Sample
33d38d2e9856962ec85237af08bb6d52_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33d38d2e9856962ec85237af08bb6d52_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33d38d2e9856962ec85237af08bb6d52_JaffaCakes118
-
Size
204KB
-
MD5
33d38d2e9856962ec85237af08bb6d52
-
SHA1
522ff0101348082f59e63cc85d214e873f0c853c
-
SHA256
44ce225b8f7a3f96f7d43958120b5f7334ec50a639da55b6bc011d4818d85c85
-
SHA512
bcdd0bb924e98833cec39d04a59c3c936b13be5ffce881d38328c36e815fa9c2b0b9b6b99b38b78c13e80ba0c38a25952e8a93838d4ee5c76e41358f53f9e102
-
SSDEEP
96:zXlgWnit4zvRnit4zvNALXXf32m7v+k1687qsE0HPsPFBG14:zVLit4zZit4zOjXft7vF1MyHYnGW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33d38d2e9856962ec85237af08bb6d52_JaffaCakes118
Files
-
33d38d2e9856962ec85237af08bb6d52_JaffaCakes118.exe windows:0 windows x86 arch:x86
31d300d677fe53a3e97acc5a01c6af08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
AddAtomW
AddLocalAlternateComputerNameW
BaseProcessInitPostImport
BaseUpdateAppcompatCache
BuildCommDCBAndTimeoutsW
CallNamedPipeA
CheckNameLegalDOS8Dot3W
ClearCommError
CompareFileTime
CompareStringW
ContinueDebugEvent
CreateFileA
CreateFileW
CreateJobSet
CreateTapePartition
CreateThread
CreateVirtualBuffer
CreateWaitableTimerA
CreateWaitableTimerW
DebugBreak
DecodeSystemPointer
DeleteTimerQueueTimer
DisconnectNamedPipe
DnsHostnameToComputerNameW
DuplicateHandle
EndUpdateResourceA
EnumSystemLanguageGroupsW
EnumSystemLocalesW
EnumerateLocalComputerNamesA
ExpungeConsoleCommandHistoryA
ExpungeConsoleCommandHistoryW
FindFirstChangeNotificationA
FindFirstFileW
FindNextChangeNotification
FindVolumeMountPointClose
FlushInstructionCache
FoldStringW
FreeLibraryAndExitThread
FreeResource
GetAtomNameA
GetBinaryType
GetCommMask
GetComputerNameExW
GetConsoleAliasExesA
GetConsoleCharType
GetConsoleCommandHistoryW
GetConsoleCursorInfo
GetConsoleFontInfo
GetConsoleFontSize
GetConsoleInputWaitHandle
GetDiskFreeSpaceA
GetDllDirectoryA
GetExitCodeThread
GetExpandedNameA
GetFileAttributesA
GetFileSizeEx
GetFirmwareEnvironmentVariableA
GetFirmwareEnvironmentVariableW
GetMailslotInfo
GetModuleFileNameA
GetModuleHandleA
GetNumaAvailableMemory
GetNumberFormatA
GetPrivateProfileIntW
GetProcAddress
GetProcessHeaps
GetProfileStringW
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetVersionExA
GetVolumeInformationW
GetVolumePathNameA
GetVolumePathNamesForVolumeNameA
GetWriteWatch
GlobalAddAtomA
GlobalAddAtomW
GlobalFindAtomA
GlobalUnfix
Heap32ListNext
HeapExtend
HeapUsage
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByte
IsDebuggerPresent
IsWow64Process
LZStart
LoadLibraryA
LockResource
MoveFileExA
NlsGetCacheUpdateCount
OpenProfileUserMapping
Process32First
QueryPerformanceFrequency
ReadConsoleOutputCharacterW
RegisterWaitForInputIdle
RemoveDirectoryA
ReplaceFile
ReplaceFileA
ReplaceFileW
RequestWakeupLatency
RtlCaptureContext
SetClientTimeZoneInformation
SetConsoleNumberOfCommandsA
SetConsolePalette
SetConsoleScreenBufferSize
SetCriticalSectionSpinCount
SetCurrentDirectoryA
SetEvent
SetFileTime
SetFileValidData
SetLocalPrimaryComputerNameA
SetMailslotInfo
SetThreadLocale
SetVolumeMountPointW
SwitchToThread
Thread32First
TransactNamedPipe
TrimVirtualBuffer
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWaitEx
VDMOperationStarted
VerifyConsoleIoHandle
VirtualQueryEx
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
WriteConsoleInputVDMW
WriteConsoleOutputA
WriteConsoleOutputCharacterW
WritePrivateProfileStructA
WriteProfileSectionW
_lclose
lstrcmpi
lstrcpyA
lstrcpynW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ