Static task
static1
Behavioral task
behavioral1
Sample
9662e22e81b3dbadde82849262cf1ca8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9662e22e81b3dbadde82849262cf1ca8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9662e22e81b3dbadde82849262cf1ca8_JaffaCakes118
-
Size
73KB
-
MD5
9662e22e81b3dbadde82849262cf1ca8
-
SHA1
2b7e17834eeb26020e4d2bdf727e6456ca7d2ed2
-
SHA256
97d502d011c2ac6a02bbef54a688c0ffead8c1f10d1cc935dd8fd1256341af06
-
SHA512
2c845ce3c60ccc6c20add4be8b2b9217ccc8e9149db5b908fbb96200fc8933d21b10c31cca162db6d1064a127760e783620a25fed6c68c2821f9601bc803751e
-
SSDEEP
1536:BBavxEBcA2jcgR9FPw5UvRN759AwNYMlBp1L5NXEZj+wT:YxEBcA2IgReUIibrqj+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9662e22e81b3dbadde82849262cf1ca8_JaffaCakes118
Files
-
9662e22e81b3dbadde82849262cf1ca8_JaffaCakes118.exe windows:4 windows x86 arch:x86
43e1c01ea3824398b7ddec938c7a1229
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_initterm
_amsg_exit
_initterm
_XcptFilter
malloc
free
iswalpha
iswdigit
_vsnwprintf
wcschr
_wcsicmp
_j0
??0exception@@QAE@XZ
__RTDynamicCast
??1type_info@@UAE@XZ
memmove
_purecall
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_wcsnicmp
rand
iswspace
_wcsupr
_beginthreadex
_errno
_unlock
__dllonexit
_lock
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy
kernel32
GetProcessHeaps
InterlockedDecrement
InterlockedIncrement
HeapValidate
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
DeleteFileW
RemoveDirectoryW
SetEnvironmentVariableW
DisableThreadLibraryCalls
DebugBreak
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenEventW
CreateSemaphoreW
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
CreateDirectoryW
CreateTimerQueueTimer
ChangeTimerQueueTimer
DuplicateHandle
GetFileAttributesW
ExpandEnvironmentStringsW
GetCurrentThread
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsFree
TlsSetValue
HeapCreate
HeapSize
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime
gdiplus
GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ