Static task
static1
Behavioral task
behavioral1
Sample
7574e1965621eb3ee4cd15410af6e11a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7574e1965621eb3ee4cd15410af6e11a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7574e1965621eb3ee4cd15410af6e11a_JaffaCakes118
-
Size
122KB
-
MD5
7574e1965621eb3ee4cd15410af6e11a
-
SHA1
e9cc66c4468376bfd0b305b5658864dcc4abd62a
-
SHA256
54d99f46891b6348d85790024fe84af33f914f54a79687bf9f20a302e8847faa
-
SHA512
f58aaa3a0f55b585562d0c61038a04c50cb187f2b3e1c19c3fdd4f721c52fd7d1120b6d32623eb6298554aaa20fa889d54a1cdca8625a35d4d0ef7104fb79298
-
SSDEEP
1536:YaUZTCV1mCpAPQXyTpiZ5sj9JWwnCU/+HSMC2piVuO80XtUCuCmw7hM950bO8pka:EZTCV1mCpAPMg4wSJrwdHmw7hi50KGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7574e1965621eb3ee4cd15410af6e11a_JaffaCakes118
Files
-
7574e1965621eb3ee4cd15410af6e11a_JaffaCakes118.exe windows:5 windows x86 arch:x86
4dc2867cde04707fee91ead401591b1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LocalFree
CreateThread
CreateFileA
HeapAlloc
WriteFile
GetVersionExW
GetLastError
GetModuleHandleA
GetComputerNameA
InterlockedIncrement
InterlockedDecrement
GetVolumeInformationA
GetTickCount
GetCurrentProcessId
GetVersionExA
GetVersion
Sleep
GetExitCodeProcess
CreateProcessA
GetTempPathA
lstrcpyA
FlushFileBuffers
WinExec
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
LocalAlloc
LoadLibraryA
GetProcAddress
TerminateThread
GetProcessHeap
WaitForSingleObject
HeapFree
FreeLibrary
lstrlenA
GetStdHandle
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RaiseException
user32
TrackPopupMenu
GetMenuItemID
KillTimer
GetSubMenu
SetForegroundWindow
LoadMenuA
FindWindowA
RegisterWindowMessageA
GetCursorPos
DrawMenuBar
PostMessageA
SetMenuDefaultItem
DestroyMenu
DestroyWindow
GetMessageA
RegisterClassExA
PostQuitMessage
GetParent
LoadIconA
SendMessageA
TranslateMessage
CreateWindowExA
EnableMenuItem
DefWindowProcA
DispatchMessageA
advapi32
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
FreeSid
AllocateAndInitializeSid
RegDeleteValueA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
shell32
Shell_NotifyIconA
oleaut32
VariantClear
shlwapi
AssocQueryStringA
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ