Static task
static1
Behavioral task
behavioral1
Sample
645a0f7a1e4c80cda78eea4f032975cb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
645a0f7a1e4c80cda78eea4f032975cb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
645a0f7a1e4c80cda78eea4f032975cb_JaffaCakes118
-
Size
130KB
-
MD5
645a0f7a1e4c80cda78eea4f032975cb
-
SHA1
cda5c24790612d4305d6b4ee7ca9f2c7c48b70b7
-
SHA256
720af0141e1122237d8bbf2554cb5d837b629ef6505077fcc7feb6e220038e82
-
SHA512
1d2a84be2482797f1addb973292b9d0dc638fd019b930d1be27f51c1d083b6bcdd61d839776df2a95748f9e8d937b50f364cde08be10d79a5c10c938c6cb1009
-
SSDEEP
3072:ihDfqsNuSDEeqfOlknR7VWkwdoQ4QAer4KcNZURUR:2DBuSDEeqfOinR7VWkS4q7RU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 645a0f7a1e4c80cda78eea4f032975cb_JaffaCakes118
Files
-
645a0f7a1e4c80cda78eea4f032975cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1b33b4d473c435328181b52d7a9b013
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDCEx
gdi32
SetBkMode
kernel32
SleepEx
LoadLibraryExA
LoadLibraryA
VirtualProtect
VirtualProtect
WriteProcessMemory
WaitForSingleObjectEx
CreateFileA
ReleaseMutex
ReleaseMutex
TerminateProcess
SleepEx
WaitForSingleObjectEx
WaitForSingleObjectEx
ReadProcessMemory
LoadLibraryA
CreateFileA
GetStartupInfoW
ReadProcessMemory
VirtualProtect
CreateFileA
LoadLibraryA
ReleaseMutex
LoadLibraryExW
ReadProcessMemory
WaitForSingleObject
GetStartupInfoA
VirtualProtect
WaitForSingleObject
GetSystemTime
WriteProcessMemory
GetProcAddress
GetCurrentDirectoryA
GetLastError
LoadLibraryA
GetCommandLineA
SetHandleInformation
GetACP
TlsGetValue
FindAtomA
GetCurrentDirectoryA
GetCurrentThread
GetCurrentThreadId
ReadProcessMemory
TerminateProcess
LoadLibraryExA
Sleep
GetSystemTimeAsFileTime
DeviceIoControl
ReadProcessMemory
LoadLibraryExW
GetSystemTimeAsFileTime
WriteProcessMemory
LoadLibraryA
CreateProcessW
GetSystemTimeAsFileTime
LoadLibraryExA
CreateProcessW
WaitForSingleObject
LoadLibraryExA
GetStartupInfoA
CreateProcessA
LoadLibraryA
WriteProcessMemory
SleepEx
VirtualProtectEx
SleepEx
VirtualProtectEx
LoadLibraryExA
TerminateProcess
TerminateProcess
GetSystemTimeAsFileTime
TerminateProcess
GetStartupInfoW
SleepEx
ReleaseMutex
GetSystemTimeAsFileTime
LoadLibraryA
CreateProcessA
VirtualProtectEx
WaitForSingleObjectEx
CreateFileA
VirtualProtectEx
ReleaseMutex
WaitForSingleObjectEx
LoadLibraryExW
WaitForSingleObjectEx
Sleep
CreateProcessA
SleepEx
VirtualProtect
LoadLibraryExW
CreateProcessA
TerminateProcess
GetSystemTimeAsFileTime
DeviceIoControl
CreateFileA
TerminateProcess
TerminateProcess
ReadFile
WaitForSingleObject
ReadProcessMemory
CreateProcessA
ReadFile
TerminateProcess
LoadLibraryExW
WaitForSingleObject
WaitForSingleObjectEx
GetStartupInfoW
VirtualProtect
SleepEx
WaitForSingleObject
GetStartupInfoW
TerminateProcess
CreateProcessW
WaitForSingleObjectEx
VirtualProtect
VirtualProtect
Sleep
WaitForSingleObject
GetSystemTimeAsFileTime
GetSystemTime
ReleaseMutex
GetStartupInfoW
TerminateProcess
SleepEx
WaitForSingleObjectEx
VirtualProtect
WaitForSingleObject
DeviceIoControl
GetStartupInfoA
WriteProcessMemory
LoadLibraryExA
GetSystemTimeAsFileTime
GetStartupInfoW
Sleep
WriteProcessMemory
SleepEx
CreateProcessW
GetSystemTime
DeviceIoControl
CreateProcessA
WriteProcessMemory
LoadLibraryA
GetStartupInfoA
ReadProcessMemory
VirtualProtectEx
ReadProcessMemory
DeviceIoControl
ReadProcessMemory
LoadLibraryA
ReleaseMutex
VirtualProtect
CreateProcessA
LoadLibraryExW
ReadProcessMemory
LoadLibraryExW
Sleep
GetStartupInfoA
GetStartupInfoA
WriteProcessMemory
ReadProcessMemory
VirtualProtect
GetSystemTime
GetSystemTime
LoadLibraryA
LoadLibraryExA
CreateFileA
ReadProcessMemory
GetStartupInfoA
GetSystemTime
CreateProcessA
CreateProcessA
ReleaseMutex
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 109KB - Virtual size: 112KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ