Static task
static1
Behavioral task
behavioral1
Sample
68e8a666a842de5a7df21152eec58831_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68e8a666a842de5a7df21152eec58831_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68e8a666a842de5a7df21152eec58831_JaffaCakes118
-
Size
434KB
-
MD5
68e8a666a842de5a7df21152eec58831
-
SHA1
8d5895a67c322bfd69a6cd8498b2cc9d9237cafc
-
SHA256
d1a979c05f80504926bec0b79d100557f0c30f0b443e9d8f9006193fd9162950
-
SHA512
bbbdd43e7467e15760f3bc16b527e963fe9061bb59e5580f9e0b777f85efdda611313b86b9ec81cce059336851b5488daec6659798c4349c32801bace2f499da
-
SSDEEP
6144:LT31qRTgjNreFYTtNsDCjieWEHsozkn2C9Mq+MjTGY+NgCUmG93kNORUgseEIz7V:LJN6FwtLUETzWHJ+YTGWw0UEtdzhuKL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68e8a666a842de5a7df21152eec58831_JaffaCakes118
Files
-
68e8a666a842de5a7df21152eec58831_JaffaCakes118.exe windows:5 windows x86 arch:x86
0dcbf6d83584fb213552a493ea58c107
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
sprintf
strerror
_errno
_beginthread
_endthread
_wsplitpath
_except_handler3
_heapmin
_splitpath
strncpy
fflush
_stricmp
malloc
fwrite
_snprintf
isprint
_pctype
fclose
_wfsopen
wcslen
_fsopen
_fullpath
ole32
CoCreateInstance
CoInitialize
CoUninitialize
odbc32
ord36
kernel32
GetCommandLineA
WaitForSingleObject
GetComputerNameA
GetCommandLineW
QueryPerformanceCounter
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
GetFileSize
MoveFileExA
GetModuleFileNameA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
CreateEventA
Sleep
CloseHandle
FreeLibrary
InitializeCriticalSection
MultiByteToWideChar
OutputDebugStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
IsBadReadPtr
IsBadWritePtr
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
SetEvent
user32
wsprintfW
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
wsprintfA
MessageBoxA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iq Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oooa Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.obb Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sef Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qwqw Size: 2KB - Virtual size: 537B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdsd Size: 2KB - Virtual size: 103B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xczxc Size: 2KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asqea Size: 2KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asqeax Size: 2KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 2KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ