Static task
static1
Behavioral task
behavioral1
Sample
6a22295d3d686871795a1ba0023c8d9a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6a22295d3d686871795a1ba0023c8d9a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a22295d3d686871795a1ba0023c8d9a_JaffaCakes118
-
Size
103KB
-
MD5
6a22295d3d686871795a1ba0023c8d9a
-
SHA1
a8cf3ad9d11061706bab644651602e3b1b1c97d7
-
SHA256
eae215becf6a98d9ea5a6ac67511f32a84b2fd877ef6f6d1fe75b270a832cbf3
-
SHA512
2816a120a3ade91eac7acfc50aea893605d114394dfb96ec31794b8ea45918cd0f0c4997596e0ebb5325dedb4116b1ff1415de781e9ff6f399f4f5c5fc949c2d
-
SSDEEP
3072:bp03gN4Q9Kc0uVdBjPL/ryN28emPeo5JlIS:V03gSQrDvFebI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a22295d3d686871795a1ba0023c8d9a_JaffaCakes118
Files
-
6a22295d3d686871795a1ba0023c8d9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
17b96d1c8ddf3bfb454a3f140c8ed0f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
FindResourceW
DeviceIoControl
TlsAlloc
TlsSetValue
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetSystemTimeAsFileTime
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
CloseHandle
QueryPerformanceCounter
GetModuleHandleA
GetFileSize
GetOEMCP
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetStringTypeW
user32
DestroyWindow
DefWindowProcA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
RegisterClassExA
BeginPaint
DrawTextA
EndPaint
GetClientRect
CreateWindowExA
ShowWindow
UpdateWindow
GetDC
GetSysColor
GetSysColorBrush
FindWindowA
MessageBoxA
wsprintfA
GetSystemMetrics
gdi32
TextOutA
CreateBitmap
Rectangle
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ole32
CoTaskMemAlloc
CoUninitialize
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ