Static task
static1
Behavioral task
behavioral1
Sample
87e5da180242f35df1a37c247d3d3dc2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87e5da180242f35df1a37c247d3d3dc2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87e5da180242f35df1a37c247d3d3dc2_JaffaCakes118
-
Size
622KB
-
MD5
87e5da180242f35df1a37c247d3d3dc2
-
SHA1
f3cf8d80c2af8e1a645df1062982da527ef506ac
-
SHA256
f5b5ce6fc8000ec94cbe6432d9ff1ccccbfc23e2e9a95daee1acdcd0bb937305
-
SHA512
b0d3ae289461ae8e883dc3a7cf8014219e98b9f68a7d84116295673303af856c88a90c9893e721eaa892ab6e50576d6db720aa084a1a70a20958dac2d15c3c3c
-
SSDEEP
12288:h0AHbvw0IyCMb5/WoypbGH91k5HgjEPtZDKt:GAHrw0IyCMbRWoyx69qgWDK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87e5da180242f35df1a37c247d3d3dc2_JaffaCakes118
Files
-
87e5da180242f35df1a37c247d3d3dc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
560cfac09774e67b84398076aae3e055
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
HeapAlloc
GetCommandLineA
GetVersion
GetCurrentDirectoryA
SetConsoleCtrlHandler
GetTimeZoneInformation
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
WriteFile
GetOEMCP
SetUnhandledExceptionFilter
GetCPInfo
WideCharToMultiByte
GetACP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
MultiByteToWideChar
HeapSize
HeapReAlloc
UnhandledExceptionFilter
VirtualAlloc
FatalAppExitA
GetProcAddress
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
IsValidLocale
FlushFileBuffers
LCMapStringW
LCMapStringA
Sleep
GetStringTypeW
GetStringTypeA
LeaveCriticalSection
EnterCriticalSection
HeapCreate
HeapDestroy
GetLastError
SetFilePointer
ReadFile
CloseHandle
GetFileType
CreateFileA
RtlUnwind
HeapFree
GetStdHandle
SetHandleCount
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
SetEndOfFile
DeleteCriticalSection
SetLastError
VirtualFree
InitializeCriticalSection
SetStdHandle
TlsGetValue
GetCurrentThread
TlsFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
user32
IntersectRect
TranslateMessage
MessageBoxA
SystemParametersInfoA
SetWindowPos
GetWindowRect
ReleaseDC
GetDC
GetWindowLongA
AdjustWindowRectEx
GetMenu
wsprintfA
SetRect
EndPaint
DefWindowProcA
BeginPaint
PostQuitMessage
GetClientRect
ClientToScreen
SendMessageA
DrawMenuBar
RedrawWindow
RegisterClassA
LoadIconA
LoadCursorA
ShowCursor
CreateWindowExA
ShowWindow
GetMessageA
PostMessageA
PeekMessageA
DispatchMessageA
gdi32
GetSystemPaletteEntries
DeleteDC
GetStockObject
CreateICA
GetDeviceCaps
winmm
joyGetPosEx
mmioOpenA
mmioDescend
mmioClose
mmioRead
mmioAscend
joyGetNumDevs
joyGetDevCapsA
joySetThreshold
joySetCapture
timeGetDevCaps
timeGetTime
mciSendCommandA
ddraw
DirectDrawCreate
dsound
DirectSoundCreate
Sections
.text Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ