Static task
static1
Behavioral task
behavioral1
Sample
a813a735a15d22f7bfa2405bc6189ae5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a813a735a15d22f7bfa2405bc6189ae5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a813a735a15d22f7bfa2405bc6189ae5_JaffaCakes118
-
Size
85KB
-
MD5
a813a735a15d22f7bfa2405bc6189ae5
-
SHA1
0da4e6ae5fc8889e04295efd1e99e7375d20a157
-
SHA256
f0568323ccb40de9b4fba0164ddd75754c329ba957ac5dac25b3e573598f6549
-
SHA512
888cee6af17def0aec3de63c211fa08bd4b161d962ea3aa13eb703cdc9b5d2380744d02d0c7cea1a8da7c98ed1890dfd6657cb451d28d006df92133f30860eae
-
SSDEEP
1536:NChNmqaOzKEbv9Q4ElAYZLoA03XEAtJM+JDuOf1bWxBZXRXpf9vIQQ1WDOVHIRZ7:NgmyzKEv9Q7bZLoAELHDf1WBZxzgQQ1W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a813a735a15d22f7bfa2405bc6189ae5_JaffaCakes118
Files
-
a813a735a15d22f7bfa2405bc6189ae5_JaffaCakes118.exe windows:5 windows x86 arch:x86
2d31f70b5ff0aa0b955f91b141d14c14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msdart
_DllMain@12
?MaxSize@CLKRLinearHashTable@@QBEKXZ
?GetDefaultSpinCount@CSpinLock@@SGGXZ
?IsWin98@CMdVersionInfo@@SAHXZ
?WriteLock@CLKRLinearHashTable@@QAEXXZ
?IsReadLocked@CFakeLock@@QBE_NXZ
?_WriteLockSpin@CReaderWriterLock@@AAEXXZ
??1CLockedSingleList@@QAE@XZ
??0CSmallSpinLock@@QAE@XZ
?IsReadUnlocked@CReaderWriterLock@@QBE_NXZ
?IsWin2k@CMdVersionInfo@@SAHXZ
?TryWriteLock@CCritSec@@QAE_NXZ
MpGetHeapHandle
?_LockSpin@CReaderWriterLock3@@AAEXW4SPIN_TYPE@1@@Z
?InsertHead@CDoubleList@@QAEXQAVCListEntry@@@Z
?DeleteKey@CLKRLinearHashTable@@QAE?AW4LK_RETCODE@@K@Z
?_FindRecord@CLKRLinearHashTable@@ABE?AW4LK_RETCODE@@PBXK@Z
?_ReadLockSpin@CReaderWriterLock2@@AAEXXZ
kernel32
ExitVDM
GetConsoleAliasesA
OpenSemaphoreA
GetCurrentThreadId
GetTickCount
GetThreadPriority
DelayLoadFailureHook
SetConsoleActiveScreenBuffer
VirtualAlloc
HeapAlloc
GetSystemTimeAsFileTime
VerifyConsoleIoHandle
LoadLibraryA
PrivCopyFileExW
SetConsoleLocalEUDC
lstrcmpiW
WritePrivateProfileSectionA
IsBadStringPtrW
GetCurrentProcessId
GetModuleHandleW
FatalExit
GetSystemWow64DirectoryA
QueryPerformanceCounter
GetCurrentThread
GetTempPathW
GetStartupInfoA
GetNumaHighestNodeNumber
CancelWaitableTimer
sqlunirl
_FindResourceEx_@16
_SetFileSecurity_@12
_GetBinaryType_@8
_RegSetValue_@20
_lstrcpyn_@12
_WriteProfileString_@12
_LoadBitmap@8
newMultiByteFromWideChar
_SendMessageTimeout_@28
_EnumDependentServices_@24
__lwrite_@12
_WriteProfileSection_@8
_CreateProcess_@40
_CreateDesktop_@24
_ChangeMenu_@20
mscms
CheckBitmapBits
IsColorProfileValid
CreateProfileFromLogColorSpaceA
AssociateColorProfileWithDeviceW
ConvertColorNameToIndex
SetColorProfileHeader
GetNamedProfileInfo
OpenColorProfileW
DisassociateColorProfileFromDeviceA
RegisterCMMA
CreateProfileFromLogColorSpaceW
UninstallColorProfileA
InternalGetPS2ColorSpaceArray
InstallColorProfileA
GetColorProfileElement
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ