Static task
static1
Behavioral task
behavioral1
Sample
a2356af1ed9449e2d79b0fdb5d4f846c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a2356af1ed9449e2d79b0fdb5d4f846c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2356af1ed9449e2d79b0fdb5d4f846c_JaffaCakes118
-
Size
667KB
-
MD5
a2356af1ed9449e2d79b0fdb5d4f846c
-
SHA1
e22e9821f43e70b0606c23dad4a6f4094a016615
-
SHA256
6018e3a21bea34a766167f72b62bf82fbd6cbcee106b22617a4b82b0ba765453
-
SHA512
d59497aa1c9458d2492e1a94f286a5809b1a05dd72ef269bcbdf09a0ffc955dfd0d4667ff8b38594972461f19224159efe2bce5cc626da77e044f959493b6752
-
SSDEEP
12288:sUXsh7V5jY42xWlGICoXVrGFUtw61/IieD3+osZACG+2FuJ5FnU2+S:s5h7VlMW4InXlPtw6hIRDOosuC7IRS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2356af1ed9449e2d79b0fdb5d4f846c_JaffaCakes118
Files
-
a2356af1ed9449e2d79b0fdb5d4f846c_JaffaCakes118.exe windows:6 windows x86 arch:x86
c65ddf4083cf5d88cedfb7e82925052c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCpyNW
netapi32
NetApiBufferFree
NetWkstaGetInfo
wininet
InternetCheckConnectionW
kernel32
SetWaitableTimer
LeaveCriticalSection
EnterCriticalSection
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
CloseHandle
WaitForSingleObject
SleepEx
SetEvent
CreateEventW
QueueUserAPC
TerminateThread
WaitForMultipleObjects
DeleteCriticalSection
CreateIoCompletionPort
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoW
VerSetConditionMask
GetNativeSystemInfo
GetCurrentProcess
SetLastError
CopyFileW
lstrlenW
GetTempFileNameW
GetTickCount
CreateMutexW
CreateMutexA
ExitProcess
DeleteFileW
RemoveDirectoryW
AllocConsole
SetConsoleTextAttribute
GetStdHandle
WriteConsoleW
ReadConsoleInputW
FreeConsole
GetLocalTime
OpenEventW
InitializeCriticalSection
GetModuleHandleA
VirtualProtect
lstrcmp
GetModuleFileNameW
CreateProcessW
GetModuleHandleW
GetProcessHeap
GetQueuedCompletionStatus
PostQueuedCompletionStatus
MoveFileExW
GetTickCount64
GetLastError
SetStdHandle
ReadConsoleW
HeapSize
GlobalMemoryStatusEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
WriteFile
SetEnvironmentVariableW
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitThread
RaiseException
RtlUnwind
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
WideCharToMultiByte
DuplicateHandle
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
TryEnterCriticalSection
MultiByteToWideChar
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
SetFilePointerEx
AreFileApisANSI
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
LocalFree
FormatMessageA
GetEnvironmentVariableW
GetFileAttributesW
DeviceIoControl
GetWindowsDirectoryW
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualFree
advapi32
RegDeleteValueW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegDeleteTreeW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
GetTokenInformation
OpenProcessToken
shell32
SHGetFolderPathAndSubDirW
ole32
CoInitializeSecurity
CoUninitialize
CoCreateGuid
StringFromGUID2
CoInitializeEx
CoCreateInstance
oleaut32
VariantInit
VariantClear
SysFreeString
SysAllocString
ws2_32
WSASetLastError
WSAGetLastError
closesocket
WSACleanup
getaddrinfo
freeaddrinfo
ioctlsocket
select
connect
shutdown
htonl
ntohl
htons
setsockopt
getsockopt
WSACloseEvent
WSAEventSelect
WSASocketW
WSAStartup
WSARecv
WSASend
WSACreateEvent
Sections
.text Size: 509KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
init Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ