Static task
static1
Behavioral task
behavioral1
Sample
5ab6abe0785dfc7b29c693a74090e9ff_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ab6abe0785dfc7b29c693a74090e9ff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ab6abe0785dfc7b29c693a74090e9ff_JaffaCakes118
-
Size
804KB
-
MD5
5ab6abe0785dfc7b29c693a74090e9ff
-
SHA1
5007225932e8266b99a6d04fbc02336ccbded26b
-
SHA256
4a2a64e83a00f34372114d87d5ec1768fd088b74193a1db37e651d2b8a742c6c
-
SHA512
464a5c863bfc22ba14a1c401fc9edcc6e82e9016524380eead53fa048e75916d1c07f35602f8d47c63533eb624e6d4f4f13c6cce01a4101c398cfa008975a328
-
SSDEEP
12288:52vIjDSb91du/Dk/6+TpyJLZAw6vPCZndKLsAwmlVyUREX:5+48BkDw6+Xw63CddlilgUmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ab6abe0785dfc7b29c693a74090e9ff_JaffaCakes118
Files
-
5ab6abe0785dfc7b29c693a74090e9ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
db9d0afe3a596eaf2235ad50109b8d02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
Module32Next
ResumeThread
FindResourceA
VirtualAllocEx
lstrcpyA
LoadResource
CreateProcessA
Sleep
GetModuleFileNameA
GetCurrentProcess
GetProcAddress
ReadProcessMemory
GetThreadContext
lstrlenA
Process32Next
Process32First
Module32First
CreateToolhelp32Snapshot
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
MessageBoxA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 733KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ