Static task
static1
Behavioral task
behavioral1
Sample
8b5fcfd8646028351bef996091f47987_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b5fcfd8646028351bef996091f47987_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b5fcfd8646028351bef996091f47987_JaffaCakes118
-
Size
207KB
-
MD5
8b5fcfd8646028351bef996091f47987
-
SHA1
32f03f999c00b1204642f1cf316f3d3d7a747682
-
SHA256
5acd360d1b6f0212e2846103a629d58a2b76eda5114ad9e22a9795e0f40d8be0
-
SHA512
20fe8b017ad3050cb28c37c69383647edf32797a29bb070fe0e263b76ef81c2a6282fabfe36db467509ba91b55c55511baa7bce1112c10bd9ad7d96a63cde593
-
SSDEEP
6144:kfCnB4tuRxfmSEVD4033I637wlV/gBjI7hHHEmTNUv+:kfIzRxfmSEH3IRpZEmh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b5fcfd8646028351bef996091f47987_JaffaCakes118
Files
-
8b5fcfd8646028351bef996091f47987_JaffaCakes118.exe windows:4 windows x86 arch:x86
78cbb5381339ca65bfc6a1c05432e233
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseSemaphore
GetModuleHandleW
GetSystemTimeAsFileTime
CreateFiberEx
TlsGetValue
WaitForSingleObject
GetProcessHeap
TlsAlloc
GetTickCount
TlsFree
DeleteFileW
TerminateThread
Sleep
IsDebuggerPresent
FoldStringW
LoadLibraryA
GetCommandLineW
InterlockedExchange
EnumResourceNamesA
VirtualProtect
RaiseException
GetLastError
InterlockedCompareExchange
GetCurrentProcess
QueryPerformanceCounter
TerminateProcess
GetCurrentThreadId
FlushFileBuffers
LoadLibraryW
GetLocaleInfoW
GetCurrentProcessId
GetStartupInfoA
CloseHandle
FreeLibrary
SetUnhandledExceptionFilter
GetProcAddress
UnhandledExceptionFilter
CreateSemaphoreW
LocalAlloc
GetModuleFileNameW
msimg32
AlphaBlend
setupapi
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
user32
LoadIconW
RealGetWindowClass
MapVirtualKeyW
ShowWindow
GetSystemMetrics
UpdateWindow
SetWindowPos
IsWindow
IsZoomed
GetParent
SetWindowPlacement
IsIconic
GetWindowPlacement
LoadImageW
DestroyWindow
SetForegroundWindow
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ