Static task
static1
Behavioral task
behavioral1
Sample
8c88e451976c23d33550d01c889a167c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c88e451976c23d33550d01c889a167c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c88e451976c23d33550d01c889a167c_JaffaCakes118
-
Size
442KB
-
MD5
8c88e451976c23d33550d01c889a167c
-
SHA1
8e05c12de586184e9aa79de79066f5b21ce38a59
-
SHA256
04d5d6181870250b812a053393701b4228370c895830fe3723ae42906a97a6aa
-
SHA512
ac762cd3fc03018cffff74481e2e5242e1767d8f5e419040873e20e68e8bd41c40c36fff6445553e94659b92c74d8494f4e7c2e477becf20a48af378a2e3a128
-
SSDEEP
12288:q9HsTOAC2ge1LU5739bnGvbBW7BePipS:qsOAnx1cGsB3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c88e451976c23d33550d01c889a167c_JaffaCakes118
Files
-
8c88e451976c23d33550d01c889a167c_JaffaCakes118.exe windows:5 windows x86 arch:x86
8790bec3bff1bf28042ad21d5933170c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
InterlockedExchange
VirtualProtect
VirtualQuery
LoadLibraryA
GetProcAddress
LockResource
LoadResource
GetModuleHandleA
FindResourceExW
GetCommandLineW
GetModuleHandleW
GetModuleFileNameW
lstrlenW
FreeLibrary
MultiByteToWideChar
FindResourceW
LoadLibraryExW
lstrcmpiW
VirtualFree
GetCurrentThreadId
SetEvent
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLastError
SizeofResource
VirtualAlloc
CreateThread
Sleep
CreateEventW
WaitForSingleObject
RaiseException
CloseHandle
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoW
RtlUnwind
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
user32
GetDC
GetClientRect
DispatchMessageW
TranslateMessage
GetMessageW
GetDesktopWindow
PostThreadMessageW
CharNextW
CharUpperW
advapi32
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoRevokeClassObject
CoInitialize
CoUninitialize
CoRegisterClassObject
StringFromGUID2
oleaut32
SysAllocString
VarUI4FromStr
UnRegisterTypeLi
LoadTypeLi
SysFreeString
SysStringLen
RegisterTypeLi
pdh
PdhBindInputDataSourceW
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE