Static task
static1
Behavioral task
behavioral1
Sample
a8f9370b0ad9390f8aeaeb05a66601b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8f9370b0ad9390f8aeaeb05a66601b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8f9370b0ad9390f8aeaeb05a66601b3_JaffaCakes118
-
Size
159KB
-
MD5
a8f9370b0ad9390f8aeaeb05a66601b3
-
SHA1
db1f7d37c5c5784cbe8bf3e1c56ea25b736fc25e
-
SHA256
d2e621e4fd1571337b548bf3d65ecfd9c7e1176282b9d73bcd188b62719228df
-
SHA512
129d8527686ed8e5c68f6e78d37897619b695089ecd243c173d2949037a81bca982d0c1a57a2290e4eb08e3e4c1d85c99b33f469b87b274b73d275361e26e01e
-
SSDEEP
3072:m31vOVbZiZ2mPcn5xGbb4M862OJb0nwLwsagiMyLsEA7xeG2fqquCe+l/m:JiZ2Vxg869bkwLCLvtqAeAm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8f9370b0ad9390f8aeaeb05a66601b3_JaffaCakes118
Files
-
a8f9370b0ad9390f8aeaeb05a66601b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
306392c8cd025e0cae31c7bb4151b65e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateMutexA
CreateProcessA
WinExec
GetLastError
GetModuleFileNameA
SetFileAttributesA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
GetProcAddress
LoadLibraryA
CloseHandle
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
ExitProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadCodePtr
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
VirtualQuery
VirtualProtect
GetSystemInfo
SetStdHandle
CreateFileA
GetACP
GetOEMCP
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
SetEndOfFile
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE