Behavioral task
behavioral1
Sample
8af1f18ed86898a92c5e20d9d3abaf7a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8af1f18ed86898a92c5e20d9d3abaf7a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Errors
General
-
Target
8af1f18ed86898a92c5e20d9d3abaf7a_JaffaCakes118
-
Size
119KB
-
MD5
8af1f18ed86898a92c5e20d9d3abaf7a
-
SHA1
e789544575c2a0a74524ab50fc47d348af876093
-
SHA256
bd882e2eefd0145ff169d868c1815df272f84a5ad1e501cfa5c3336839774171
-
SHA512
ac12219195622d65790a63c405a32c0b9f38fe74e7492cb7894d934b84792e22c25ba3453cdcd7fc9e228190082b0e132bce167e0e6e4c10aeea804ac2a168c2
-
SSDEEP
3072:7LnLvYuSYOkboKxL35ouXgkfMVtViEoW:XLYuSYIKxDwLj
Malware Config
Extracted
zloader
-
build_id
3238765
Signatures
-
Zloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af1f18ed86898a92c5e20d9d3abaf7a_JaffaCakes118
Files
-
8af1f18ed86898a92c5e20d9d3abaf7a_JaffaCakes118.exe windows:5 windows x86 arch:x86
29d67c641e65844a3a4750af285b0cf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CompareStringW
CreateFileW
ExitThread
ExpandEnvironmentStringsW
FileTimeToSystemTime
FlushFileBuffers
FreeLibrary
GetFileAttributesW
GetFileType
GetModuleHandleA
GetProcessHeap
GetTickCount
GetUserDefaultLangID
HeapFree
InitializeCriticalSectionAndSpinCount
IsValidLocale
LeaveCriticalSection
LocalReAlloc
ResetEvent
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
VirtualFree
WriteFile
shell32
CommandLineToArgvW
user32
CharNextA
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
CopyRect
DestroyIcon
DrawTextW
GetMenuState
GetNextDlgTabItem
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowTextLengthW
InsertMenuW
InvalidateRect
IsDialogMessageW
IsDlgButtonChecked
KillTimer
LoadCursorW
LoadIconA
MessageBoxW
MoveWindow
SetCapture
SetTimer
SetWindowPlacement
SetWindowTextW
TrackPopupMenu
gdi32
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteObject
EndPage
GetDeviceCaps
LineTo
SelectObject
SetRectRgn
StartDocA
StartPage
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ