Static task
static1
Behavioral task
behavioral1
Sample
713b04e49b72ec3f1c7a565c3966a6ab_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
713b04e49b72ec3f1c7a565c3966a6ab_JaffaCakes118
-
Size
519KB
-
MD5
713b04e49b72ec3f1c7a565c3966a6ab
-
SHA1
1dac64da30097ac31736c1529dfcc96604439d3c
-
SHA256
f00a042bb3aa0fd344f98c2f2f868a70ae5ceeaaead2c66302b9a53199e8f991
-
SHA512
103d5562a6e68d47a4aee181e812f8054f1492c5c9d6566a4c3fee1e9d3adaa506182b9ad6d14793fd895ef81d113e18652e878127274c72d181f2b5e36c6971
-
SSDEEP
12288:31PdSGXeXBqusYqPB/0oz1xY1Z9CczJgUa:3lvXeXBqpBj85hep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 713b04e49b72ec3f1c7a565c3966a6ab_JaffaCakes118
Files
-
713b04e49b72ec3f1c7a565c3966a6ab_JaffaCakes118.exe windows:5 windows x86 arch:x86
0a3b38cbb947e383d237e44a8c8fe986
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
SetEnvironmentVariableW
SetHandleInformation
GetTimeFormatA
GetFileAttributesExA
GetTickCount
FindNextVolumeMountPointA
GetLocaleInfoW
SetSystemTimeAdjustment
HeapCreate
GetExitCodeProcess
LoadResource
ReleaseSemaphore
GetConsoleAliasesW
CreateTimerQueueTimer
LocalAlloc
BeginUpdateResourceA
SetProcessWorkingSetSize
VirtualProtect
GetConsoleCursorInfo
GetCurrentProcessId
lstrcpyW
FreeLibrary
MapUserPhysicalPages
FindResourceExW
GetProfileIntW
GetModuleHandleExA
EnumDateFormatsExW
lstrlenA
FindResourceA
ExitThread
GlobalFix
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetLastError
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
CloseHandle
CreateFileA
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
SetStdHandle
MultiByteToWideChar
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
FlushFileBuffers
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW
RaiseException
user32
GetDesktopWindow
advapi32
AbortSystemShutdownW
BackupEventLogW
OpenSCManagerA
RegCreateKeyA
RegReplaceKeyW
ObjectPrivilegeAuditAlarmA
EnumDependentServicesW
PrivilegedServiceAuditAlarmA
ReadEventLogA
Sections
.text Size: 462KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 29.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ