Static task
static1
Behavioral task
behavioral1
Sample
35f7f8cc56bf4659a2ef9a79a40ff908_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35f7f8cc56bf4659a2ef9a79a40ff908_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35f7f8cc56bf4659a2ef9a79a40ff908_JaffaCakes118
-
Size
133KB
-
MD5
35f7f8cc56bf4659a2ef9a79a40ff908
-
SHA1
1fb0141d215f72e4601b914fdbe1164ed205f480
-
SHA256
19f885909e7fdb1401f2bf24160aeff232e0332ccaad84ffdefe67e907b31e97
-
SHA512
01389b39d523c7bd2ee7ad055461a73a912602297de0d6f34fd5198c0f44e2acfa454c05ecbacb5f68a4ec0ec59b9606ae82ded55aa2937765ea13822f4af4ef
-
SSDEEP
3072:I/jaKsrFN3p8ZB+fPwPjEOGsByTTGoGVtkD:I/jaKkJp7wLXxEAVtkD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35f7f8cc56bf4659a2ef9a79a40ff908_JaffaCakes118
Files
-
35f7f8cc56bf4659a2ef9a79a40ff908_JaffaCakes118.exe windows:5 windows x86 arch:x86
58ab83c8d173163df02181ac6c9ce1db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DeleteFileA
CreateThread
lstrcpyA
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
HeapSize
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
OutputDebugStringA
GetCurrentDirectoryA
CreateMutexA
VirtualAlloc
GetStartupInfoW
lstrcatA
CreateFileW
ExitProcess
ReadFile
TerminateThread
WriteFile
HeapFree
HeapAlloc
lstrlenA
GetFileSize
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
CreateFileA
GetCommandLineA
HeapSetInformation
GetLastError
EncodePointer
DecodePointer
RaiseException
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
user32
RegisterClassA
LoadCursorA
EndPaint
DestroyWindow
GetMessageA
ScreenToClient
RegisterClassExA
PostQuitMessage
SendDlgItemMessageA
FillRect
LoadIconA
wsprintfA
GetClientRect
SendMessageA
BeginPaint
PtInRect
TranslateMessage
InflateRect
MessageBoxA
CreateWindowExA
DefWindowProcA
ShowWindow
FrameRect
PostMessageA
DispatchMessageA
UpdateWindow
gdi32
GetStockObject
MoveToEx
LineTo
CreateFontA
DeleteObject
SelectObject
CreatePen
CreateSolidBrush
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegQueryValueExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
iphlpapi
GetTcpStatistics
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ