Static task
static1
Behavioral task
behavioral1
Sample
9774e2e4cd4fdfc742627dd6915cecaf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9774e2e4cd4fdfc742627dd6915cecaf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9774e2e4cd4fdfc742627dd6915cecaf_JaffaCakes118
-
Size
19KB
-
MD5
9774e2e4cd4fdfc742627dd6915cecaf
-
SHA1
8277daba2c272b7d6689867e2ee0aee7627a3769
-
SHA256
0bfb42b4d6bb846d0ce3f30055c119d3304609b89039aa42eb51ad8885ef0284
-
SHA512
a528ba683a5637e16f325c666dcbff57206a28a05c4c8c9264b24cd6f2b7125d6f49b2ac8e3837a844af0f0696d8a887df5f9bd8b9e2da96e882c27b07b35440
-
SSDEEP
384:sL6jh+Y1wy07bQgZ5lSEdM10F6d5MwORzd3Eqj:sL6jh+97bdhxodwXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9774e2e4cd4fdfc742627dd6915cecaf_JaffaCakes118
Files
-
9774e2e4cd4fdfc742627dd6915cecaf_JaffaCakes118.exe windows:1 windows x86 arch:x86
1854648b01dc49477afd399dcee91010
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
SetEvent
GetACP
ExitProcess
CloseHandle
WideCharToMultiByte
GetModuleHandleW
SetUnhandledExceptionFilter
HeapReAlloc
SetEvent
GetProcAddress
SetUnhandledExceptionFilter
GetModuleHandleW
SetLastError
GetCurrentProcessId
ExitProcess
LocalAlloc
VirtualFree
CreateFileW
HeapFree
GetVersionExA
InterlockedDecrement
GetModuleFileNameA
DeleteCriticalSection
HeapAlloc
WriteFile
HeapFree
CloseHandle
EnterCriticalSection
FreeLibrary
MultiByteToWideChar
GetStartupInfoA
CreateThread
LeaveCriticalSection
WaitForSingleObject
HeapAlloc
lstrcpyW
GetStartupInfoW
GetTickCount
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoW
TerminateProcess
WriteFile
GetVersionExA
HeapReAlloc
ExitProcess
LocalAlloc
Sleep
Sleep
InitializeCriticalSection
SetEvent
FreeLibrary
GetProcAddress
WideCharToMultiByte
ExitProcess
GetStartupInfoW
InterlockedDecrement
VirtualAlloc
GetVersionExA
SetLastError
VirtualAlloc
FormatMessageW
InitializeCriticalSection
FormatMessageW
InterlockedDecrement
GetProcessHeap
LoadLibraryW
GetSystemTimeAsFileTime
CreateThread
HeapReAlloc
GetModuleFileNameA
SetLastError
GetLastError
InterlockedIncrement
lstrlenW
GetTickCount
GetModuleFileNameA
MultiByteToWideChar
InterlockedIncrement
HeapFree
InterlockedDecrement
SetUnhandledExceptionFilter
CloseHandle
CreateThread
GetModuleHandleA
TerminateProcess
lstrcpyW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
Sleep
HeapDestroy
HeapFree
GetProcessHeap
TerminateProcess
SetLastError
GetModuleHandleW
LoadLibraryA
ReadFile
InitializeCriticalSection
Sleep
WideCharToMultiByte
LeaveCriticalSection
GetCurrentProcessId
GetProcAddress
EnterCriticalSection
GetProcAddress
SetEvent
QueryPerformanceCounter
QueryPerformanceCounter
HeapReAlloc
HeapFree
LocalFree
HeapFree
TerminateProcess
ReadFile
GetModuleFileNameA
GetStartupInfoW
lstrcpyW
FormatMessageW
InterlockedIncrement
ReadFile
VirtualAlloc
Sections
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE