Static task
static1
Behavioral task
behavioral1
Sample
429f5048462fd037e3ad7f8a211004c6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
429f5048462fd037e3ad7f8a211004c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
429f5048462fd037e3ad7f8a211004c6_JaffaCakes118
-
Size
374KB
-
MD5
429f5048462fd037e3ad7f8a211004c6
-
SHA1
a517b360d8b0749cbd30f2b19e4675af6f745d96
-
SHA256
012fe771283404e5231ed2f71e4932674f89d52aa93608bfcaf67150e53609b0
-
SHA512
db976f5af533653951890119ce7daafcb442761807d9b3cc5cb3c570ea27fc2a82f34d352dbbe2273ec1c5c1b96aa32e029bdcd620fcdf67e4f00623192bde80
-
SSDEEP
6144:Ae+6e6u9KibsTOHRFGKuHNv18a0Zq6aqHLsJHNnVhk80Bij0BiN:AeLS9XsYRFGzHN2VHQJHlVI10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429f5048462fd037e3ad7f8a211004c6_JaffaCakes118
Files
-
429f5048462fd037e3ad7f8a211004c6_JaffaCakes118.exe windows:5 windows x86 arch:x86
238ab76f12b861cbb8646337a8c48062
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
WriteConsoleW
SetFilePointerEx
CreateFileW
FlushFileBuffers
GetProcessHeap
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetModuleFileNameW
LoadLibraryA
lstrlenW
lstrcatW
lstrcmpiW
GetProcAddress
lstrcpynW
Sleep
VirtualProtect
SetStdHandle
FindClose
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapFree
HeapAlloc
LCMapStringW
GetFileType
CloseHandle
GetConsoleCP
GetConsoleMode
VirtualAlloc
user32
TranslateMessage
GetMessageW
LoadStringW
LoadIconW
LoadCursorW
IntersectRect
SetCursor
AdjustWindowRect
GetClientRect
EndPaint
BeginPaint
GetDC
UpdateWindow
DrawIcon
GetSystemMetrics
EndDialog
DialogBoxParamW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
gdi32
SetPixel
LineTo
CreatePen
SelectObject
MoveToEx
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
advapi32
SystemFunction036
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ