Static task
static1
Behavioral task
behavioral1
Sample
62aff6da7799c93f61044d9615beecfd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62aff6da7799c93f61044d9615beecfd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62aff6da7799c93f61044d9615beecfd_JaffaCakes118
-
Size
90KB
-
MD5
62aff6da7799c93f61044d9615beecfd
-
SHA1
0d46ba472e4c58c2f60c8011969b2f0eeccd077b
-
SHA256
e0ce4bae5f58c390a7a8dbe78e81eb027bb5baea46f90e6a41f368842c7a836a
-
SHA512
b48ead76ee5764f51517ff4e891fecaf97bc1a83ed63dfea11578eac091a9c5a9382f456c360ce0295a9d9b24e9a661df2d5c2b3c92ae3c6f125e6fac044a53a
-
SSDEEP
1536:wV0wfuqJUg4nxRPbfP8qHMHqIHCZiM82cYp100QUAGu4Zrqf0o8:wV3m3rfP8qHMHqIHCYM5p100rAGusm0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62aff6da7799c93f61044d9615beecfd_JaffaCakes118
Files
-
62aff6da7799c93f61044d9615beecfd_JaffaCakes118.exe windows:5 windows x86 arch:x86
0ab4717630eb7ccb25c153773cc314ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
CloseHandle
GetFileSize
VirtualAlloc
VirtualProtect
FindResourceA
LoadResource
lstrcmpiA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
GetTickCount
WriteFile
GetVersionExA
HeapAlloc
IsValidCodePage
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
user32
UpdateWindow
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
FindWindowA
MessageBoxA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
wsprintfA
LoadStringA
CreateWindowExA
ShowWindow
advapi32
RegCloseKey
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ