Static task
static1
Behavioral task
behavioral1
Sample
42c03538ceac7ab0584b2843a7dbae12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42c03538ceac7ab0584b2843a7dbae12_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42c03538ceac7ab0584b2843a7dbae12_JaffaCakes118
-
Size
145KB
-
MD5
42c03538ceac7ab0584b2843a7dbae12
-
SHA1
5327b0d14be2fd7a395e90ce2f62275656e5f061
-
SHA256
125a500010f4afdafc5d5cf68063b5e7c58a37561d2beec78b2f44c9a51dbfd3
-
SHA512
e8eed5d1214994dfc0cc50c52a5beb0727b8ad8f95525513f4d5775877ae9bf660df2980e4c52a090280020ba45fb0e776bb4e29fbe0ebf68e1176576d4105d4
-
SSDEEP
3072:BqgXmINafNX/5OZ5JJI5LVOtmf4rtcWiRCf2Ks5W:0gXmw0t/5CnqhItmf4rpiwP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42c03538ceac7ab0584b2843a7dbae12_JaffaCakes118
Files
-
42c03538ceac7ab0584b2843a7dbae12_JaffaCakes118.exe windows:5 windows x86 arch:x86
805d2b1df9a8fe2b4a82d50544e77cce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSACleanup
kernel32
GetACP
GetModuleFileNameA
SetEnvironmentVariableA
VirtualAlloc
VirtualFree
VirtualQuery
GetSystemInfo
LoadLibraryExA
GetProcAddress
GetModuleHandleW
Sleep
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
SetStdHandle
GetLastError
GetFileType
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetFullPathNameW
SetEndOfFile
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentDirectoryW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileAttributesA
GetFullPathNameA
CloseHandle
CreateFileW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentProcessId
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
CreateFileA
RaiseException
PeekNamedPipe
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetModuleHandleA
SetFilePointer
GetDriveTypeA
GetTimeZoneInformation
ReadFile
RtlUnwind
HeapReAlloc
HeapSize
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
FindFirstFileA
CreateDirectoryA
CreateDirectoryW
LocalFree
WaitForSingleObject
CreateEventA
GetEnvironmentVariableA
GetEnvironmentVariableW
CreateMutexA
InitializeCriticalSection
ReleaseMutex
SetEvent
GetExitCodeProcess
GetVersionExA
FindFirstFileW
FindClose
GetFileAttributesExW
GetModuleFileNameW
FreeEnvironmentStringsW
GetFileInformationByHandle
advapi32
AllocateAndInitializeSid
FreeSid
GetNamedSecurityInfoW
GetEffectiveRightsFromAclW
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ