Static task
static1
Behavioral task
behavioral1
Sample
9c1a3e3ad13b0cf40174aba8bc577758_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9c1a3e3ad13b0cf40174aba8bc577758_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9c1a3e3ad13b0cf40174aba8bc577758_JaffaCakes118
-
Size
5.0MB
-
MD5
9c1a3e3ad13b0cf40174aba8bc577758
-
SHA1
6162912ecbbd96c68baff3332e9b1e88f76cad7d
-
SHA256
1c195bd637b11d18ad7ebf12a6fee1d77e59a6b08e8f9358372ba16bd9458df6
-
SHA512
0d53034f05cde4a05a6b4eb403822f9344cc3b4c5063f4c46424f823c8cb643aecf2f9ce68f185dd894db9417841bf3d7e162f6a8bcf593a7dd5cdc802b9c015
-
SSDEEP
98304:Z6reGGlU2XX/++l4WT35JAxhRhpURHb0SL4VAveYgnbcmMtGipk4dxI83Cs1Azy:ZGGldXJ4WTwRhpURjL7Ib7Mt/9/x3Cs9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9c1a3e3ad13b0cf40174aba8bc577758_JaffaCakes118
Files
-
9c1a3e3ad13b0cf40174aba8bc577758_JaffaCakes118.exe windows:5 windows x86 arch:x86
9f78a0c13d255339e765f35330df74bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RequestDeviceWakeup
GetCommProperties
CreateTapePartition
SetTapeParameters
GetSystemTime
GetLocalTime
GetNativeSystemInfo
IsProcessorFeaturePresent
FileTimeToDosDateTime
SetSystemTimeAdjustment
CreateMailslotW
lstrcpyA
lstrcatA
lstrlenA
lstrlenW
_lwrite
TlsFree
WaitForMultipleObjectsEx
SignalObjectAndWait
WriteFileGather
OpenFileMappingW
GetLogicalDriveStringsA
LoadLibraryW
GetModuleHandleW
GetModuleHandleExA
FindResourceW
EnumResourceTypesW
BeginUpdateResourceW
EndUpdateResourceA
DeviceIoControl
GetPrivateProfileIntW
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStructA
GetCurrentDirectoryW
RemoveDirectoryA
QueryDosDeviceW
FindFirstFileExA
SearchPathW
SetPriorityClass
BuildCommDCBAndTimeoutsW
SetComputerNameW
GetComputerNameExW
CreateActCtxW
IsWow64Process
EnumCalendarInfoExA
EnumDateFormatsExW
GetNumberOfConsoleMouseButtons
SetConsoleCursorInfo
WriteConsoleA
GetConsoleAliasW
GetConsoleAliasesLengthW
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetFileInformationByHandle
SizeofResource
ReleaseMutex
ReleaseSemaphore
LockResource
ResetEvent
LeaveCriticalSection
InitializeCriticalSection
GetQueuedCompletionStatus
TerminateThread
UnhandledExceptionFilter
GetBinaryTypeA
HeapWalk
HeapFree
HeapCreate
VirtualAllocEx
VirtualQuery
GetProcAddress
GetProfileSectionA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineW
GetLastError
HeapAlloc
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
LCMapStringW
EnterCriticalSection
LoadLibraryExW
HeapReAlloc
GetStringTypeW
GetConsoleCP
GetConsoleMode
CloseHandle
user32
MessageBoxExW
DragDetect
CreateWindowExW
GetMessageTime
GetClassNameA
advapi32
DeleteAce
SetServiceObjectSecurity
QueryServiceLockStatusW
CloseServiceHandle
ChangeServiceConfigA
RegUnLoadKeyA
RegQueryValueExA
RegEnumKeyA
RegConnectRegistryW
GetCurrentHwProfileW
LookupPrivilegeNameW
LookupPrivilegeNameA
FindFirstFreeAce
AddAccessAllowedAce
ObjectPrivilegeAuditAlarmA
RevertToSelf
OpenEventLogA
NotifyChangeEventLog
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 73.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ