Static task
static1
Behavioral task
behavioral1
Sample
74b605bddd546b09557d836479526b0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74b605bddd546b09557d836479526b0f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74b605bddd546b09557d836479526b0f_JaffaCakes118
-
Size
114KB
-
MD5
74b605bddd546b09557d836479526b0f
-
SHA1
a53801893fa20a3a9f67be8ad51da6a5a392f611
-
SHA256
b5003c744d14d02a997d3de2f1c1ad2430978869c88ce24df9d1c59edad1fe64
-
SHA512
8c365a5bc530cc3c0a3e9117eca32e0275c0eb8f708e442564d4d2543a632b0e558c3e846875fc0d8786c531c7ccbe6edefd0bc77f2756a48075c1f8926f9558
-
SSDEEP
3072:XXH1BiBGPEovXOKYz3Th+++2sTumOYQJgYC11PB:nH1BvEov9YZMnOYTVt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74b605bddd546b09557d836479526b0f_JaffaCakes118
Files
-
74b605bddd546b09557d836479526b0f_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac0aa1b6587a836b76cb2f4a4f9b77b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
GetTickCount
GetThreadTimes
lstrcpyA
GetConsoleWindow
SetConsoleCP
GetCurrentDirectoryW
CreateFileA
CreateJobObjectA
GlobalFlags
GetConsoleCP
GetThreadContext
GetProcessWorkingSetSize
SetEnvironmentVariableA
WriteFile
GetSystemWindowsDirectoryA
RemoveDirectoryW
GetSystemDirectoryA
CloseHandle
IsDebuggerPresent
SwitchToThread
TerminateThread
CreateToolhelp32Snapshot
Thread32First
GetExitCodeProcess
Process32Next
ProcessIdToSessionId
AreFileApisANSI
GetLongPathNameW
FindFirstFileW
GetCurrentThreadId
DeleteAtom
GetVersion
ContinueDebugEvent
GetVersionExA
GetCurrentThread
GetCurrentProcessId
ExitThread
VirtualAlloc
GetProcAddress
LoadLibraryA
IsBadReadPtr
VirtualProtect
ExitProcess
VirtualFree
GetModuleHandleA
user32
GetDialogBaseUnits
GetShellWindow
GetKeyboardLayout
FindWindowW
InSendMessage
GetWindowThreadProcessId
ShowCaret
IsWindowEnabled
GetCaretPos
IsWindowUnicode
FindWindowA
GetForegroundWindow
CharUpperA
GetClipboardSequenceNumber
IsMenu
IsWindowVisible
GetProcessDefaultLayout
CloseWindow
GetMenuItemID
GetMenu
IsIconic
GetInputState
msi
ord14
Sections
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ