Static task
static1
Behavioral task
behavioral1
Sample
a22b01b60cbb1c5e2559d75a0cc84678_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a22b01b60cbb1c5e2559d75a0cc84678_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a22b01b60cbb1c5e2559d75a0cc84678_JaffaCakes118
-
Size
2.1MB
-
MD5
a22b01b60cbb1c5e2559d75a0cc84678
-
SHA1
f1f98320b438bc598adc0d1cfcc19db1c661b981
-
SHA256
480b8de16d04a641b9f151adac96ba4fb896fba09beb379993345c009f7ced87
-
SHA512
70aca3dc83eb8b07317c16a6c65c2db5acc1cd59814824f50b0e008bafac9df4bd3ab494ce6e5f5ac32187c77684d15b812a3dc841ff92e7b459ed5ed2911886
-
SSDEEP
49152:PrL35wXJjBxHAUrggBgtEJEL7FWKtcpgb8NJvYj67nKl:P3pwV3/gjWCBk2AzvYinY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a22b01b60cbb1c5e2559d75a0cc84678_JaffaCakes118
Files
-
a22b01b60cbb1c5e2559d75a0cc84678_JaffaCakes118.exe windows:5 windows x86 arch:x86
905d34f3a0f0d1f1849bb3d88f260ac5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleW
GetCurrentThread
VirtualFree
GetVersionExW
lstrlenW
GetLastError
GetProcAddress
VirtualAlloc
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
SetThreadAffinityMask
CloseHandle
GetCurrentProcessId
CreateFileA
DisableThreadLibraryCalls
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFilePointer
GetStdHandle
DeleteCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
HeapFree
Sleep
MultiByteToWideChar
SetStdHandle
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
FlushFileBuffers
gdi32
CreateSolidBrush
CreateHatchBrush
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CRT Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guids Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.guids0 Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 33B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ