_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
a95ca9ce82560a1597850817ddd69b16_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a95ca9ce82560a1597850817ddd69b16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a95ca9ce82560a1597850817ddd69b16_JaffaCakes118
-
Size
3.7MB
-
MD5
a95ca9ce82560a1597850817ddd69b16
-
SHA1
180a0206e51a228a94d600bbf56c05ed85b90509
-
SHA256
5e46be0d5e14713cc54213582bd50d3b08ab2913610b44e4ab9c906d6af4d712
-
SHA512
9734303571f1ca9aa6518c59fd5c1b80eb92684f33a5fc206e54f824b637930bc03516552caaa92f8298e186c6a13373d22146d2bb1580655aabde007207e2db
-
SSDEEP
98304:T3b92j3lL33Wo9nQEPoCaScgWQGH/kEb:T3Bi1TdJQOoCaSc0GHsEb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a95ca9ce82560a1597850817ddd69b16_JaffaCakes118
Files
-
a95ca9ce82560a1597850817ddd69b16_JaffaCakes118.exe windows:5 windows x86 arch:x86
3d16ac85159d43302636242bbea48e2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
EnumResourceNamesW
OpenFile
lstrlenA
WritePrivateProfileStructA
SetLocalTime
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
DeleteVolumeMountPointA
MoveFileExW
InterlockedDecrement
CreateJobObjectW
GetUserDefaultLCID
OpenSemaphoreA
ConnectNamedPipe
_lclose
GetProcessPriorityBoost
CreateNamedPipeW
GetSystemTimeAsFileTime
ReadConsoleW
SetCommTimeouts
TzSpecificLocalTimeToSystemTime
TlsSetValue
GlobalAlloc
Sleep
GetVersionExW
WriteConsoleW
IsDBCSLeadByte
GetTimeZoneInformation
lstrcatA
GetBinaryTypeW
SetThreadPriority
GlobalUnlock
DeactivateActCtx
SetCurrentDirectoryA
FillConsoleOutputCharacterW
GetLastError
GetTapeStatus
SetVolumeLabelW
ReadFileEx
EnterCriticalSection
_hwrite
SetFileApisToOEM
LoadLibraryA
OpenMutexA
SetCalendarInfoW
BeginUpdateResourceA
WriteProfileSectionW
AddAtomA
GetTapeParameters
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetModuleHandleA
LoadLibraryExA
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
GetConsoleCursorInfo
WaitForDebugEvent
LocalSize
DebugBreak
lstrcpyA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
VirtualAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
HeapSize
CreateFileA
CloseHandle
user32
GetCursorPos
Exports
Exports
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guluvob Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ