Static task
static1
Behavioral task
behavioral1
Sample
695e46e8b1e1b9473a6149a2f82583cf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
695e46e8b1e1b9473a6149a2f82583cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
695e46e8b1e1b9473a6149a2f82583cf_JaffaCakes118
-
Size
40KB
-
MD5
695e46e8b1e1b9473a6149a2f82583cf
-
SHA1
8087122aa1865d4abe3cadd1277e4b8d1f0d0d45
-
SHA256
6f38f072850154b95e4085462930b7444118a871e124e882d948442f14613b31
-
SHA512
e5b2b4555660acf4f586923863bcc5c250596a25bdda1bb8926fe42566805b5e59417010e8a95feec50268a559fd7be990e82918e56db69189b351c2034bd5b4
-
SSDEEP
768:aWQ8ZA6HMTmiX5Bayf/Vd6AkZAPZAbZAfJS/TsYzt89nT7:HQ85MCi2yFd6loMwS/TZp89f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 695e46e8b1e1b9473a6149a2f82583cf_JaffaCakes118
Files
-
695e46e8b1e1b9473a6149a2f82583cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
f288734f48dfa8c88d9670c54d7e306b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
LdrDisableThreadCalloutsForDll
wcsrchr
memmove
wcschr
RtlAnsiStringToUnicodeString
_wcsnicmp
_snwprintf
wcsncpy
NtDeviceIoControlFile
NtFlushBuffersFile
NtClose
RtlInitUnicodeString
NtOpenFile
NtQueryInformationFile
NtReadFile
NtWriteFile
strncpy
toupper
_stricmp
_wcsicmp
_strnicmp
strncmp
wcsncmp
strstr
wcsstr
strchr
strrchr
NtQuerySystemTime
NtQuerySystemInformation
RtlCreateHeap
RtlDestroyHeap
RtlAllocateHeap
RtlReAllocateHeap
RtlFreeHeap
NtTerminateProcess
_ultow
_ultoa
NtQueryInformationThread
RtlEnterCriticalSection
RtlLeaveCriticalSection
RtlInitializeCriticalSection
RtlDeleteCriticalSection
RtlRaiseException
memset
memcpy
strlen
strcmp
RtlUnwind
kernel32
IsValidLocale
VirtualAlloc
mscms
CreateColorTransformW
DeleteColorTransform
GenerateCopyFilePaths
CreateDeviceLinkProfile
SetStandardColorSpaceProfileA
CheckColors
ConvertColorNameToIndex
d3d8thk
OsThunkDdCreateD3DBuffer
OsThunkDdGetDriverInfo
OsThunkDdQueryDirectDrawObject
OsThunkDdCreateSurfaceEx
OsThunkDdCreateMoComp
OsThunkDdAlphaBlt
OsThunkD3dDrawPrimitives2
OsThunkDdBeginMoCompFrame
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lsNr Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rca Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CJdbHx Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oyPUJk Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xsRxd Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ