Static task
static1
Behavioral task
behavioral1
Sample
a0e170418c118fdd3121503d05139a7f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0e170418c118fdd3121503d05139a7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0e170418c118fdd3121503d05139a7f_JaffaCakes118
-
Size
236KB
-
MD5
a0e170418c118fdd3121503d05139a7f
-
SHA1
5d1d6ca27bdfafecea698bc1946f9b1b833acce0
-
SHA256
7764129c8ecd3b7fc4e1c96f62d7c1aa173d13d69e9bda3e98aa3247e88d965b
-
SHA512
d585de600c3d6c1b3605ada4c554b944cb84175268516a81ca89a28d773b1319fafa0b81f7cf5741d98f0be0c99768e89a1ba7edc22a85e6c48fa9c622daf768
-
SSDEEP
3072:YfaaWzI7Zp28Sta6WFYHAI2QtknjWUalEKT7CbAyPcvljE+yE4k:Yyy04I2BnfalEI7C7cG+74
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0e170418c118fdd3121503d05139a7f_JaffaCakes118
Files
-
a0e170418c118fdd3121503d05139a7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
eecc0943f5e4449cee200c13bde68344
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocalTime
GetTickCount
SetConsoleCtrlHandler
WriteFile
Sleep
GetModuleHandleA
FindResourceA
SizeofResource
LoadResource
WriteConsoleA
GetStdHandle
GetModuleFileNameA
GetLastError
FormatMessageA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
LocalFree
GetFileSize
LocalAlloc
IsProcessorFeaturePresent
GetSystemInfo
GetComputerNameA
lstrcmpiA
GetVersionExA
GlobalMemoryStatus
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
HeapAlloc
RaiseException
GetACP
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
InterlockedExchange
VirtualQuery
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetFileAttributesA
SetFilePointer
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
SetStdHandle
FlushFileBuffers
VirtualProtect
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
SetEndOfFile
user32
CharToOemBuffA
WinHelpA
wsprintfA
GetKeyboardType
SystemParametersInfoA
GetSystemMetrics
advapi32
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
DeleteService
RegOpenKeyExA
RegDeleteKeyA
ControlService
StartServiceA
SetServiceStatus
OpenServiceA
RegQueryValueExA
RegCreateKeyExA
ReportEventA
OpenSCManagerA
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
RegCloseKey
DeregisterEventSource
RegisterEventSourceA
wininet
InternetCloseHandle
InternetAttemptConnect
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetReadFile
HttpQueryInfoA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE