Static task
static1
Behavioral task
behavioral1
Sample
767074731adc2a3a2193200b902dcb6d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
767074731adc2a3a2193200b902dcb6d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
767074731adc2a3a2193200b902dcb6d_JaffaCakes118
-
Size
1.2MB
-
MD5
767074731adc2a3a2193200b902dcb6d
-
SHA1
19390351113c5fa0de5e0f0d79b66af5d8d612ce
-
SHA256
0883fc5ffd7890d2f64ee9704008052ea81754ad5172c717386b1e33bfe30177
-
SHA512
2c96a689cc391204a64debfb4ce21ababc039e56ef781c6a5bcc709176e4b072aff7b12eabd0eef2f32d2934408e74e63d2fd8df21d5bfcd0dc8c65591658105
-
SSDEEP
12288:xeXr/Cm+XQ9i8aMVkUet7EwBI+APutDrVkP+xnXOBI+AM0W:xGr/Cm+X18zVkUetVI5ut/VkP+x6IS0W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 767074731adc2a3a2193200b902dcb6d_JaffaCakes118
Files
-
767074731adc2a3a2193200b902dcb6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2351e714d9783912c3c5d84368818046
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetWindowsDirectoryA
SetFileAttributesA
GetDriveTypeA
FindClose
lstrcatA
lstrlenA
lstrcpyA
FindNextFileA
CloseHandle
GetFileSize
CreateFileA
GetLogicalDrives
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Process32Next
Sleep
CreateToolhelp32Snapshot
GetSystemDirectoryA
CreateThread
GetLastError
CreateMutexA
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WinExec
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
Process32First
GetModuleFileNameA
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetEnvironmentStringsW
HeapAlloc
RtlUnwind
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA
user32
SendMessageA
MessageBoxA
FindWindowA
BlockInput
keybd_event
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
ShowWindow
SetWindowTextA
advapi32
RegQueryValueExA
GetUserNameA
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
ShellExecuteA
winmm
mciSendStringA
Sections
.petite Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE