Static task
static1
Behavioral task
behavioral1
Sample
96758cd69efdb70cd32e9786664d3eac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96758cd69efdb70cd32e9786664d3eac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96758cd69efdb70cd32e9786664d3eac_JaffaCakes118
-
Size
287KB
-
MD5
96758cd69efdb70cd32e9786664d3eac
-
SHA1
e671df06976f31aea16862eb382427770a18a45e
-
SHA256
5d10928822f45dacaf88c9e1a940b4cc3a19adddfcc8e4a3ac5fb19d45f6276f
-
SHA512
2826d82b0a84045732e3daba6fd5e5f77a99bbcdb450162626ec39733332efd4aa9139b4a47824aa962ecb34b3475204419259bc87c44fd765ad7eaa2812305e
-
SSDEEP
6144:w8iTt2SmrYbksIpaozTzzlCarkpANp0n7kTtHMVw12vDVc:wvt2h8MrlvrLp0nOMVtv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96758cd69efdb70cd32e9786664d3eac_JaffaCakes118
Files
-
96758cd69efdb70cd32e9786664d3eac_JaffaCakes118.exe windows:5 windows x86 arch:x86
00dd7c03084673d13fec5d4022003508
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetStartupInfoW
GetModuleHandleA
GetStdHandle
InterlockedDecrement
GetModuleHandleW
VirtualAlloc
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetEnvironmentVariableA
ole32
OleSetMenuDescriptor
OleUninitialize
OleInitialize
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 221KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ