Static task
static1
Behavioral task
behavioral1
Sample
a7fcb873df4981808e9839804f8ccc3d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7fcb873df4981808e9839804f8ccc3d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7fcb873df4981808e9839804f8ccc3d_JaffaCakes118
-
Size
245KB
-
MD5
a7fcb873df4981808e9839804f8ccc3d
-
SHA1
b8b6c4b6915d310ce4e56e225888889c4331def6
-
SHA256
acff23533dc074dddc51108602f1e5024e0467468abdbdaea9e70b31d896a0cb
-
SHA512
0c5d0053c70456a16baff311a533aeb345b4faf0d9928c41d1ff00c95e618e1f7fbb30fbd429d363ca92238c3d8219d85b854768ba76b974bc66f848a780240d
-
SSDEEP
6144:DceEYYQ4g6+9VrqDVnEAEcVWQr6ukfo4oKPxPwNx:Dce94g6OVODVEMnrp2zwNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7fcb873df4981808e9839804f8ccc3d_JaffaCakes118
Files
-
a7fcb873df4981808e9839804f8ccc3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c26c2d4db8dbdea3cd8a564c8cec084
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtPowerInformation
user32
GetLastInputInfo
SystemParametersInfoW
kernel32
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetProcessHeap
FindNextFileW
ProcessIdToSessionId
HeapFree
HeapDestroy
LoadLibraryExW
LoadResource
IsDebuggerPresent
lstrlenW
CreateFileW
SetUnhandledExceptionFilter
WaitForSingleObject
FileTimeToSystemTime
HeapSize
EnterCriticalSection
UnhandledExceptionFilter
ReadFile
OpenProcess
SetThreadExecutionState
SizeofResource
FindClose
WaitForMultipleObjects
CloseHandle
GetSystemInfo
GetFileSize
HeapReAlloc
FindResourceW
HeapAlloc
FindResourceExW
LockResource
GetLocalTime
FindFirstFileW
LeaveCriticalSection
RaiseException
DeleteCriticalSection
SystemTimeToFileTime
LocalFileTimeToFileTime
LocalFree
OutputDebugStringW
LocalAlloc
FreeLibrary
DisableThreadLibraryCalls
GetCurrentThreadId
DeviceIoControl
CreateThread
VirtualAllocEx
mscms
CreateColorTransformW
IsColorProfileTagPresent
CreateMultiProfileTransform
GetColorProfileElementTag
SetStandardColorSpaceProfileW
GetCMMInfo
UnregisterCMMW
CreateProfileFromLogColorSpaceW
UninstallColorProfileA
modemui
drvGetDefaultCommConfigA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.S Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.meqNSK Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AYHdRT Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CqXTjM Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 213KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reQkO Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ