Static task
static1
Behavioral task
behavioral1
Sample
60d3043ce6c8b6eeb7b55e03f35850dc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60d3043ce6c8b6eeb7b55e03f35850dc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60d3043ce6c8b6eeb7b55e03f35850dc_JaffaCakes118
-
Size
758KB
-
MD5
60d3043ce6c8b6eeb7b55e03f35850dc
-
SHA1
39bb0724d2a1382b7104757fbed64f907305196d
-
SHA256
3992f05803a78f49f27078fc9716bade2f7a5bf3c1940d846df74ae0bd7040ba
-
SHA512
af95a1c2e3326efb92ae49fb4be9300c88aa456ed23d79b22764b3e1061583975b231263351962f26cd4c274d9f379d2fa099eb2824155eca501461d26c37481
-
SSDEEP
12288:pUWu2Cb7Gr90R3tDMM/fYPBf/176gbThDwjV6nrBziqkLP8L0yjxC4TMX8Qvx6N+:pUWu2Cb7Gr90VtDMcYPBf/176gbThDwB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60d3043ce6c8b6eeb7b55e03f35850dc_JaffaCakes118
Files
-
60d3043ce6c8b6eeb7b55e03f35850dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b5464ab6a21b3ba9042452cefe40d66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryExW
GetThreadTimes
GetCurrentThread
CompareStringW
CompareStringA
GetModuleHandleA
GetStartupInfoW
GetVersionExA
DebugBreak
RaiseException
LoadLibraryA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
HeapAlloc
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
WriteFile
GetProcessHeap
CloseHandle
FreeLibrary
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
VirtualQuery
InterlockedExchange
GetACP
GetOEMCP
GetCPInfo
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
SetFilePointer
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
SetEnvironmentVariableA
oleaut32
SysAllocStringByteLen
Sections
.text Size: 512KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ