Static task
static1
Behavioral task
behavioral1
Sample
aca92a2a9c903ebcf8cf280af9fc4bc3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aca92a2a9c903ebcf8cf280af9fc4bc3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aca92a2a9c903ebcf8cf280af9fc4bc3_JaffaCakes118
-
Size
197KB
-
MD5
aca92a2a9c903ebcf8cf280af9fc4bc3
-
SHA1
81f8a562035e408bef94b9be04b307b5e950bf57
-
SHA256
1c41447a570ed8e2240afac8bff44edf3c58e34fa88b5967300393019d177827
-
SHA512
0f096e8741e6ff909c59510bddc2c162eb3589e67e91ebeeff6888d020a8cb6e64e592f16b4cfad23a04f3fabf42684ffaf48b73311e1bebd7ef41f16b776b33
-
SSDEEP
6144:6qty/kSYhp4dXcfumNmUQv4a6YMpKn6dSfpe2E+:rty/kppwsY1CAn6MhP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aca92a2a9c903ebcf8cf280af9fc4bc3_JaffaCakes118
Files
-
aca92a2a9c903ebcf8cf280af9fc4bc3_JaffaCakes118.exe windows:5 windows x86 arch:x86
973420842ffb2e16243746433260ea9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardOwner
IsWindowVisible
MessageBoxIndirectA
GetKBCodePage
kernel32
CreateFileW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapAlloc
LoadLibraryW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
ReadFile
HeapSize
CloseHandle
WriteConsoleW
SetFilePointer
SetStdHandle
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ