Static task
static1
Behavioral task
behavioral1
Sample
657352851f6ff4246975bf80dfed2b25_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
657352851f6ff4246975bf80dfed2b25_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
657352851f6ff4246975bf80dfed2b25_JaffaCakes118
-
Size
117KB
-
MD5
657352851f6ff4246975bf80dfed2b25
-
SHA1
f85e3b4894870b1856e53bef0eed231bb0b1f582
-
SHA256
866aef59242dd0b06b45081b18eea0b2ccf60210c21beee9413d0e52d4630b43
-
SHA512
e067a22cb453bcd10216f4ae8345381bfd9bd41912f7c17372ab276c56b83f89cd41300e29698274fd6e23e11030e1b5ef4834aa6611eb204e35a1aebcb3f84a
-
SSDEEP
3072:q5WhPKstWJEDcno5QyFCTJ+1/1bvm+QbIK3jWSCGbuAzwmlYBWJau:MEcoqrcBFm/jbuAzdeu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 657352851f6ff4246975bf80dfed2b25_JaffaCakes118
Files
-
657352851f6ff4246975bf80dfed2b25_JaffaCakes118.exe windows:6 windows x86 arch:x86
4a1437839c1a6a31a1b584d875999f51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
LoadIconA
LoadCursorA
GetClientRect
RedrawWindow
EndPaint
BeginPaint
UpdateWindow
DrawTextA
KillTimer
SetTimer
ShowWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
DefWindowProcA
DispatchMessageA
GetMessageA
gdi32
SetBkMode
SelectObject
GetStockObject
CreateFontA
SetTextColor
kernel32
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetConsoleCP
LCMapStringW
GetConsoleMode
DecodePointer
CreateFileW
GetProcessHeap
TlsGetValue
CreateFileA
ReadFile
WriteFile
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
WriteConsoleW
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ