Static task
static1
Behavioral task
behavioral1
Sample
a66100d7a0c695406ac5440ec6b7ca2a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a66100d7a0c695406ac5440ec6b7ca2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a66100d7a0c695406ac5440ec6b7ca2a_JaffaCakes118
-
Size
23KB
-
MD5
a66100d7a0c695406ac5440ec6b7ca2a
-
SHA1
0cbbc273f98a1ce630397356a9b0f146227efaac
-
SHA256
914b2936d9c16e2d52974504e319ad45f5a42adcb710bf37a431ab85e0613684
-
SHA512
4e1caa4a8988f4ff5611196d67826e892c80e38682900bf7b67d12d311d42134f6dff704363d66a3f9414c30db778e13588848e4f33a7fe7ffcd54be8fdef050
-
SSDEEP
384:K5Lf7/LloA1xXbk59k77PS3atsU1Gm6yXeNl6td5hlVAv:Cf7/LfvXw5m7PS3aLIm6yOqVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a66100d7a0c695406ac5440ec6b7ca2a_JaffaCakes118
Files
-
a66100d7a0c695406ac5440ec6b7ca2a_JaffaCakes118.exe windows:5 windows x86 arch:x86
3aa9738c9304e8920a07a0f2706bf609
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CloseHandle
InitializeCriticalSection
lstrcmpiW
InterlockedExchange
InterlockedDecrement
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleA
HeapAlloc
LoadLibraryA
LocalFree
CreateThread
LocalFree
GetLastError
CreateThread
GetLastError
HeapDestroy
HeapAlloc
GetModuleFileNameW
LocalFree
HeapDestroy
InterlockedDecrement
UnhandledExceptionFilter
InterlockedIncrement
EnterCriticalSection
lstrlenA
CloseHandle
GetModuleFileNameA
InterlockedDecrement
CloseHandle
GetCurrentProcess
HeapDestroy
ReadFile
GetSystemTimeAsFileTime
InterlockedIncrement
LoadLibraryA
GetCurrentProcess
Sleep
DisableThreadLibraryCalls
lstrlenA
GetCurrentProcess
HeapFree
EnterCriticalSection
CloseHandle
GetProcessHeap
GetCurrentThreadId
GetVersionExA
DeleteCriticalSection
user32
DispatchMessageW
SetWindowLongW
EndDialog
PostQuitMessage
GetDesktopWindow
TranslateMessage
KillTimer
DestroyWindow
EnableWindow
GetSysColor
IsWindow
PostQuitMessage
LoadCursorW
DestroyWindow
EndDialog
KillTimer
MessageBoxW
GetSysColor
IsWindow
GetDC
EnableWindow
GetWindowRect
wsprintfA
GetDlgItem
TranslateMessage
SetWindowTextW
DestroyWindow
SetWindowLongW
SendMessageW
ReleaseDC
SetForegroundWindow
DestroyWindow
SetWindowPos
GetClientRect
EndDialog
GetWindowLongW
GetFocus
DestroyWindow
GetWindowLongW
BeginPaint
LoadCursorW
EndPaint
DispatchMessageW
LoadCursorW
EndPaint
SetDlgItemTextW
DispatchMessageW
GetDesktopWindow
KillTimer
LoadIconW
InvalidateRect
Sections
.text Size: 18KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ