Static task
static1
Behavioral task
behavioral1
Sample
975c69c94f2f06f8122ffca2e366b39b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
975c69c94f2f06f8122ffca2e366b39b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
975c69c94f2f06f8122ffca2e366b39b_JaffaCakes118
-
Size
372KB
-
MD5
975c69c94f2f06f8122ffca2e366b39b
-
SHA1
fb55d412600c84bf10ff70d1ccde713851d9ecee
-
SHA256
6bbe34042f5db1b4b93e82c981f14e7eb786ba06be616ccbecabcbe73cdacb3b
-
SHA512
2612743beb36cb4e279bdf7b455fe7792ba5f1aefc44e9deb3855b9fffcb47dc4edf9617a9a6b2357712ca50472254655b8c17ca5eba6c356a1f6f74d202a670
-
SSDEEP
6144:vjlsQzI74BoPDXjXgSiujLYuoCR1xIgEpb6tUvb8Oi4Wa09p39oG3c/cJq3:rV84BoLXDg24RE7Eo+jHiJJo+cUJq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 975c69c94f2f06f8122ffca2e366b39b_JaffaCakes118
Files
-
975c69c94f2f06f8122ffca2e366b39b_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c1f8caac1cd5d04432ca38346a36a9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wmakepath
_wsplitpath
_wcsnicmp
iswctype
wcscpy
wcsncat
wcschr
_adjust_fdiv
malloc
_initterm
free
wcslen
_wcsicmp
kernel32
HeapFree
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcpyW
GetModuleFileNameW
LoadLibraryW
GetLastError
HeapSize
IsBadWritePtr
lstrcpynW
GetProcAddress
FreeLibrary
GetCurrentProcess
CloseHandle
SetEvent
SetEndOfFile
SetFilePointer
CreateFileW
FreeResource
LockResource
LoadResource
FindResourceW
WaitForSingleObject
CreateThread
CreateEventW
GetProfileStringW
IsBadReadPtr
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
GetTickCount
DeleteCriticalSection
Sleep
InitializeCriticalSection
lstrcmpiW
AllocConsole
GetStdHandle
SetConsoleScreenBufferSize
HeapAlloc
OutputDebugStringW
FreeConsole
GetProcessHeap
WriteFile
lstrlenW
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhpf Size: 1024B - Virtual size: 210B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ppS1 Size: 1024B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4Q3l3 Size: 333KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hKQI Size: 1024B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ljsd Size: 1024B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ