Static task
static1
Behavioral task
behavioral1
Sample
a6910503f8dcee29cbbe8310b0a6f309_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6910503f8dcee29cbbe8310b0a6f309_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6910503f8dcee29cbbe8310b0a6f309_JaffaCakes118
-
Size
304KB
-
MD5
a6910503f8dcee29cbbe8310b0a6f309
-
SHA1
05fa7205b8ede3b9fa407f31aa5e87b2dab9ab8a
-
SHA256
d6c2f47dcb1b525f82ce55f592980e185f9bf670745265a270d3dd6f94f056c7
-
SHA512
82960ec69d3340ee48c8e6b56a8f12de63cc59a6cde463baae4a9b696023ce2fc4cee673283c2cfdebb97b5268386d1503621bf44adb519978416ae298b8a54d
-
SSDEEP
6144:r1WYjX9W4yu7hZC/zu+BLy2Go+J+qWTBvG+V:r1FQ4yudZQu+Bm4+J+qWTl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6910503f8dcee29cbbe8310b0a6f309_JaffaCakes118
Files
-
a6910503f8dcee29cbbe8310b0a6f309_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c4ee090b711f5cb151778a1da927074
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
SetFileAttributesA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
Sleep
WinExec
SetCurrentDirectoryW
TerminateProcess
GetCurrentProcess
SetLocaleInfoW
CreateFileW
WriteFile
GetLastError
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTickCount
DeleteFileW
GetFileAttributesW
WaitForSingleObject
SetEvent
CreateEventW
CloseHandle
FreeEnvironmentStringsW
GetModuleFileNameA
CompareStringW
HeapSize
FlushFileBuffers
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetStartupInfoW
HeapAlloc
ReadFile
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeW
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
LoadIconW
LoadCursorW
LoadStringW
RegisterClassExW
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
advapi32
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
shell32
SHCreateDirectoryExW
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
wininet
InternetCrackUrlW
HttpQueryInfoW
InternetSetStatusCallbackW
InternetCloseHandle
InternetGetConnectedState
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
Sections
.text Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ