Static task
static1
Behavioral task
behavioral1
Sample
4169637d7706c5e78faebca09a4247a1_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
4169637d7706c5e78faebca09a4247a1_JaffaCakes118
-
Size
420KB
-
MD5
4169637d7706c5e78faebca09a4247a1
-
SHA1
8b98cf0e37042fb730f80fec7184d49312046bd3
-
SHA256
6cd26d42c6cfb34472dda17e1c441cde9e2cb6f7e9d23a26deb336760e09a656
-
SHA512
c12eb1091e1c0f713dad405bc4fac0eeb3214c376f2e985342457c4c193db75a975af1a67a60b8326172165483ea9831ba36a29bdd8a81978ac2674f0092b746
-
SSDEEP
12288:jUt5x9ApH8/Jjzb3GVCPHZ1wkwWklnOtII0X4QDxZIq:wSH8hjfGVCP5ekw8II0rZIq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4169637d7706c5e78faebca09a4247a1_JaffaCakes118
Files
-
4169637d7706c5e78faebca09a4247a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
bc06ec6c74627013ae422153cabd1d66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
GetLastError
FindFirstFileA
GetFileAttributesA
FindClose
FindNextFileA
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
PeekNamedPipe
ExitProcess
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
DeleteFileA
DuplicateHandle
GetModuleFileNameA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
Sleep
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
FlushFileBuffers
WriteFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
ReadFile
SetFilePointer
SetStdHandle
GetProcAddress
LoadLibraryA
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
CreateFileA
SetEndOfFile
GetLocaleInfoW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
GetFileInformationByHandle
SetEnvironmentVariableW
wsock32
ntohl
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE