Static task
static1
Behavioral task
behavioral1
Sample
5f836196fd93e8a9d480ed969f3dcc71_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
5f836196fd93e8a9d480ed969f3dcc71_JaffaCakes118
-
Size
263KB
-
MD5
5f836196fd93e8a9d480ed969f3dcc71
-
SHA1
b96de6b4b71054500773b540821498d32816c411
-
SHA256
6b2a0ce0971127d728af9da18f786dd763ad4df97f88168b420694f6cdb7594c
-
SHA512
c9c01f01d9289087cdb75c00bf30301f86672af09d83dda4e4878853ae6f5e59d592a212f0352eaedfabddc669819eab3e31a6283946a42927f7a1f7d6d85371
-
SSDEEP
6144:h7ihGh7FTf0B/uLz9K9jjN/OCxwo27HVw6hmZz0:n7FTf0ywCCxvqHuzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f836196fd93e8a9d480ed969f3dcc71_JaffaCakes118
Files
-
5f836196fd93e8a9d480ed969f3dcc71_JaffaCakes118.exe windows:4 windows x86 arch:x86
7c0bf2909dd19329101dcf1b09cc0712
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSEnumerateSessionsW
WTSQuerySessionInformationW
WTSFreeMemory
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
kernel32
GetLocaleInfoA
GetCurrentThreadId
WriteFile
GetSystemTimeAsFileTime
HeapFree
InterlockedExchange
IsDebuggerPresent
HeapFree
GetSystemTime
LoadLibraryW
SetUnhandledExceptionFilter
WideCharToMultiByte
QueryPerformanceCounter
HeapAlloc
UnhandledExceptionFilter
GetThreadLocale
LoadLibraryExW
GetEnvironmentVariableA
GetCurrentProcess
SystemTimeToFileTime
EnumResourceTypesA
GetCurrentProcessId
CloseHandle
HeapDestroy
InterlockedCompareExchange
GetModuleHandleA
TerminateProcess
lstrlenW
CompareFileTime
HeapReAlloc
Sleep
CreateFileW
RaiseException
lstrlenA
MultiByteToWideChar
LocalAlloc
GetStdHandle
GetProcessHeap
GetStartupInfoA
GetACP
GetTickCount
HeapSize
CreateProcessA
lstrcpynW
oleacc
LresultFromObject
AccessibleObjectFromPoint
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ