_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
961d8c15db474a4ed6f31558b989430a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
961d8c15db474a4ed6f31558b989430a_JaffaCakes118
-
Size
437KB
-
MD5
961d8c15db474a4ed6f31558b989430a
-
SHA1
1d369cabc6195412b85e3ec5c0f07e16b0ae76dc
-
SHA256
99fae1fe1739052540a8a99cb4377fb9c0a575a3b880d96940f6c06b12d50edf
-
SHA512
2b99af482f0d9241de4411d011df51859e99f9f6e4b585a7db5c6c933627eb3322644feb40492ca9b6f8524daace812e7008b83c92c031c789236078dcde6dc1
-
SSDEEP
12288:xcevXfwQhBz7pSdMdi8263bNeYTleiZGiY:xnvoc59Se2cbRleniY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961d8c15db474a4ed6f31558b989430a_JaffaCakes118
Files
-
961d8c15db474a4ed6f31558b989430a_JaffaCakes118.exe windows:5 windows x86 arch:x86
0f21cf9000e2dd22eaabd876d8669f47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
lstrlenA
WritePrivateProfileStructA
TlsGetValue
GetNumberOfConsoleInputEvents
CallNamedPipeA
DeleteVolumeMountPointA
InterlockedDecrement
CreateJobObjectW
GetUserDefaultLCID
OpenSemaphoreA
ConnectNamedPipe
_lclose
GetProcessPriorityBoost
CreateNamedPipeW
GetSystemTimeAsFileTime
ReadConsoleW
SetCommTimeouts
FindResourceExA
GlobalAlloc
LoadLibraryW
Sleep
GetVersionExW
WriteConsoleW
IsDBCSLeadByte
lstrcatA
GetBinaryTypeW
SetThreadPriority
GlobalUnlock
EnumResourceNamesW
SetCurrentDirectoryA
FillConsoleOutputCharacterW
GetLastError
GetTapeStatus
SetVolumeLabelW
ReadFileEx
EnterCriticalSection
_hwrite
SetFileApisToOEM
GetLocalTime
OpenMutexA
SetCalendarInfoW
BeginUpdateResourceA
WriteProfileSectionW
AddAtomA
GetTapeParameters
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetModuleHandleA
LoadLibraryExA
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
GetConsoleCursorInfo
LocalSize
lstrcpyA
DeactivateActCtx
FileTimeToDosDateTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
user32
GetCursorPos
gdi32
GetBitmapDimensionEx
Exports
Exports
Sections
.text Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ