Static task
static1
Behavioral task
behavioral1
Sample
34e4cc74b40c7c9e4cae70d60bbc8911_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34e4cc74b40c7c9e4cae70d60bbc8911_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34e4cc74b40c7c9e4cae70d60bbc8911_JaffaCakes118
-
Size
517KB
-
MD5
34e4cc74b40c7c9e4cae70d60bbc8911
-
SHA1
0b0a0ed510b53d6d21bf4b1896b3ae7fe6dd46e3
-
SHA256
e60ce2853e1ae35970f4efcd5d2c24ebac109e5035efd4a8fffbc24712efd657
-
SHA512
8ef9be335b64abc52f06f22db137967f8be2a7e0a95ff2589c4f05f14a170a90276793312d01c08e3c337a5433eed6a1a8b85582ca67d4cc7cec45eed171f64e
-
SSDEEP
12288:nmBZ/F0WMNrRxq8lN0mYY+CaT6XtwH/FOZ5qO3+oNp:nmr/F0WMQ8v0EgH/FOZ1D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34e4cc74b40c7c9e4cae70d60bbc8911_JaffaCakes118
Files
-
34e4cc74b40c7c9e4cae70d60bbc8911_JaffaCakes118.exe windows:4 windows x86 arch:x86
2929e5dca3423abf1ed8946bfd898feb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SystemParametersInfoW
GetMonitorInfoW
SetWindowsHookExA
IsIconic
RegisterClassExA
LoadCursorFromFileA
GetWindowTextW
RegisterClassA
kernel32
GetModuleHandleA
GetConsoleCP
EnumSystemLocalesA
EnterCriticalSection
FlushFileBuffers
GetProcAddress
CompareStringA
WideCharToMultiByte
GetCommandLineA
GetSystemTimeAsFileTime
SetLastError
GetEnvironmentStrings
DeleteCriticalSection
EnumSystemLocalesW
GetConsoleOutputCP
VirtualAlloc
ReadConsoleOutputAttribute
IsDebuggerPresent
GetFileType
WriteConsoleA
GetEnvironmentStringsW
HeapSize
ExpandEnvironmentStringsA
GetCurrentProcessId
GetPriorityClass
SystemTimeToFileTime
GetVolumeInformationW
SetStdHandle
TlsFree
GetCurrentThreadId
TlsSetValue
GlobalAddAtomA
GetStringTypeA
SetHandleCount
FreeLibrary
LCMapStringW
GetCommandLineW
GlobalUnlock
AllocConsole
SetFilePointer
InterlockedDecrement
CreateFileA
ReadFile
CloseHandle
WriteFile
GetACP
SetEnvironmentVariableA
HeapDestroy
VirtualQuery
GetProcessHeap
MultiByteToWideChar
GetTickCount
IsValidLocale
GetStartupInfoW
GetStdHandle
LoadLibraryA
RtlUnwind
GetConsoleMode
LCMapStringA
GetCPInfo
GetLastError
GetStringTypeW
GetDateFormatA
QueryPerformanceCounter
OpenProcess
HeapCreate
GetStartupInfoA
TlsAlloc
GetTimeFormatA
InterlockedExchange
GetUserDefaultLCID
GetVersionExA
TerminateProcess
GetNamedPipeHandleStateW
HeapFree
CreateDirectoryW
SystemTimeToTzSpecificLocalTime
GetLocaleInfoA
InterlockedIncrement
VirtualFree
WriteConsoleOutputAttribute
WriteConsoleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsGetValue
FreeEnvironmentStringsW
SetConsoleCtrlHandler
HeapAlloc
IsValidCodePage
ExitProcess
CreateMailslotW
HeapReAlloc
GetProfileSectionA
lstrlenA
GetModuleFileNameW
Sleep
OpenMutexA
GetLocaleInfoW
InitializeCriticalSection
GetCurrentThread
LeaveCriticalSection
GetModuleFileNameA
CompareStringW
GetCurrentProcess
GetTimeZoneInformation
FreeEnvironmentStringsA
CreateMutexA
WriteConsoleInputW
WritePrivateProfileStructA
GetOEMCP
comctl32
InitCommonControlsEx
Sections
.text Size: 339KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ