Static task
static1
Behavioral task
behavioral1
Sample
a7fb765ef4a6d2e28bc54579b2037699_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7fb765ef4a6d2e28bc54579b2037699_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7fb765ef4a6d2e28bc54579b2037699_JaffaCakes118
-
Size
187KB
-
MD5
a7fb765ef4a6d2e28bc54579b2037699
-
SHA1
79dd56ddcc485f8fd3b54fd8b79649efb81c083c
-
SHA256
7c8c2590389c9126f5ebec1de869a0463216d6dd6416d1faad6873019112dc79
-
SHA512
68e279b68a4175348d699a39b61dae0f8c823764b57b7d1dcbe1e77159a9a89c6e61d9d9a282d000280a9e349dfe5fcb332763681cb8c1da2be45d1c16339d93
-
SSDEEP
3072:69lRVjRnDLR8fOtvhM86J5Dbia0iZ8vQXZmjgqnYmMTv0KYr3ysE:mRPn2fY3ubiaVu6Zmjgqhl3C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7fb765ef4a6d2e28bc54579b2037699_JaffaCakes118
Files
-
a7fb765ef4a6d2e28bc54579b2037699_JaffaCakes118.exe windows:5 windows x86 arch:x86
361a49876faf5b48c8890c95eb92825b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetCommandLineA
WriteProcessMemory
lstrlenW
GetModuleFileNameW
Sleep
ReadProcessMemory
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
AllocConsole
lstrlenA
GetProcAddress
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
GetModuleFileNameA
lstrcpyA
CreateMutexA
lstrcmpiA
GetLastError
lstrcmpA
lstrcatA
ExitProcess
CompareStringW
MultiByteToWideChar
CompareStringA
IsValidCodePage
GetStartupInfoA
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
GetModuleHandleW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RtlUnwind
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
user32
MessageBoxA
ShowWindow
GetWindowLongA
MessageBoxW
CallWindowProcA
EnableMenuItem
GetSysColor
IsWindow
DefWindowProcA
DispatchMessageA
CreateWindowExA
LoadMenuA
DialogBoxParamA
KillTimer
InsertMenuA
TrackPopupMenu
gdi32
DeleteObject
PolyTextOutA
CreateDCA
GetFontData
comdlg32
PrintDlgA
ChooseFontA
GetSaveFileNameA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ