Static task
static1
Behavioral task
behavioral1
Sample
6a2ddc8960ef0a190dfd87595775fddd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a2ddc8960ef0a190dfd87595775fddd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a2ddc8960ef0a190dfd87595775fddd_JaffaCakes118
-
Size
188KB
-
MD5
6a2ddc8960ef0a190dfd87595775fddd
-
SHA1
113616b8456f84d1ceb148f26d6f0267a010769a
-
SHA256
010031cf8c7810a3093dabff5225827059e588a48cbee58f3af5d57f47b13a04
-
SHA512
3b2114b2c6d4f2296579fdff466f1fc0fb39eee894baa25066fe09a92e6d9890cdd1e177fea8999e5f7a0d555264d74d45e86e62d55ac448cc78249b0f52ad60
-
SSDEEP
3072:uHoYsldPaDOTp9xy64+RNFvL2vzQXTIE0rU++EK/:uuldaD8p2/+RTvyzQEbrAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6a2ddc8960ef0a190dfd87595775fddd_JaffaCakes118
Files
-
6a2ddc8960ef0a190dfd87595775fddd_JaffaCakes118.exe windows:5 windows x86 arch:x86
d75b0ddda59ec3452f81a7d6b85a8c66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
WideCharToMultiByte
CopyFileW
GetModuleFileNameW
MultiByteToWideChar
MoveFileW
CloseHandle
ExpandEnvironmentStringsW
MoveFileExW
LoadLibraryExW
ReadFile
CreateFileW
GetLastError
GetProcAddress
SetEnvironmentVariableA
SetDllDirectoryW
CreateProcessW
FreeLibrary
GetEnvironmentVariableW
GetCommandLineW
HeapSetInformation
GetFullPathNameW
HeapFree
HeapAlloc
GetCurrentProcess
HeapReAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetFilePointer
RaiseException
SetStdHandle
LoadLibraryW
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetCurrentDirectoryW
GetDriveTypeW
LCMapStringW
GetStringTypeW
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringW
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
GetFileAttributesA
CompareStringA
GetModuleHandleA
CreateFileA
GetFileSize
VirtualFree
user32
MessageBoxW
DestroyWindow
PostQuitMessage
GetWindowLongA
DefWindowProcA
GetMenuItemID
SetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
GetMenuItemCount
RegisterClassA
SetTimer
DestroyMenu
CreateWindowExA
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetLengthSid
RegOverridePredefKey
gdi32
SetArcDirection
PolylineTo
CreateBrushIndirect
SelectObject
SetDIBits
oleaut32
SafeArrayAllocDescriptor
SafeArrayDestroy
ole32
CoTreatAsClass
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ