Static task
static1
Behavioral task
behavioral1
Sample
474efc2039b60a6a377dbabe0c6cbba5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
474efc2039b60a6a377dbabe0c6cbba5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
474efc2039b60a6a377dbabe0c6cbba5_JaffaCakes118
-
Size
104KB
-
MD5
474efc2039b60a6a377dbabe0c6cbba5
-
SHA1
47b224f3dacac4fe245091fd47c3a5deeccdde77
-
SHA256
17a946797a4c2a8001e4983253d6ad99cbb42253ec117fb2c2265d3400e93ce9
-
SHA512
17746d842f6e0e9cb49a7f7efa483419a610e055aeb9b33445aec6817dbdd2ecd08eb5c159aed6c1b1867ee80860768d8eeb019a58fdc5a048a856e0f618ab99
-
SSDEEP
1536:dEk2epV8VkFHdn4xPJyPZ1BNq320FIU5vzY2UXi:dEAiVy94xBWMFIU5vzYP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 474efc2039b60a6a377dbabe0c6cbba5_JaffaCakes118
Files
-
474efc2039b60a6a377dbabe0c6cbba5_JaffaCakes118.exe windows:5 windows x86 arch:x86
71a1bbcc3e493dee570bce007e0e0a92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
lstrlenA
UnmapViewOfFile
lstrcpynA
MapViewOfFileEx
WaitForSingleObject
GetFileAttributesExA
GetTickCount
VirtualFree
ExpandEnvironmentStringsA
InitializeCriticalSection
TerminateThread
GetSystemWindowsDirectoryA
GetCurrentProcess
lstrcmpiA
GetProcAddress
VirtualAlloc
EnterCriticalSection
LoadLibraryA
CreateFileMappingA
GetModuleFileNameA
VirtualProtect
DeleteCriticalSection
GetVersionExA
CloseHandle
OpenFileMappingA
VirtualProtectEx
GetModuleHandleA
LeaveCriticalSection
ExitProcess
GetLastError
HeapFree
HeapAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapReAlloc
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
ole32
CoInitialize
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE