Static task
static1
Behavioral task
behavioral1
Sample
ab875b68f7ede173068b91c134b9de29_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab875b68f7ede173068b91c134b9de29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab875b68f7ede173068b91c134b9de29_JaffaCakes118
-
Size
596KB
-
MD5
ab875b68f7ede173068b91c134b9de29
-
SHA1
582782969a57d9a857181f9d6e41c2d7480b341e
-
SHA256
a0ae1d3b10d69d53cbe27dbd206df68cd456c84b51ce5bbe5aa2815ac1c01677
-
SHA512
71f0ee0e71c30f511ba0ad95be26b1d064b385a428fe1e4292f8a8f29778d88f5f9a3004e8f97ab2592b72ac9be5ce9f65e1a97dbf71b6357a6ae5dde09ac297
-
SSDEEP
12288:5VFbunv1BlLa0ZLBk3wdyzJswNnAxOy93nFHEN+7Biggq3RVnco70h/vwDh:5VputHLa0Ztk3UyzJsSAdHN7Biggq33/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab875b68f7ede173068b91c134b9de29_JaffaCakes118
Files
-
ab875b68f7ede173068b91c134b9de29_JaffaCakes118.exe windows:4 windows x86 arch:x86
d746aad69ea6aa728ba4f20f366d07bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
LeaveCriticalSection
TlsGetValue
WideCharToMultiByte
FreeLibrary
GetOEMCP
EnumSystemLocalesA
GetConsoleMode
GetCurrentProcess
InterlockedExchange
CompareStringW
SetFilePointer
FlushFileBuffers
CreateMutexA
Sleep
GetACP
VirtualLock
OpenMutexA
FreeEnvironmentStringsA
ReadFile
GetConsoleCP
TlsSetValue
GetCurrentThreadId
SetStdHandle
FreeEnvironmentStringsW
CloseHandle
GetLocaleInfoA
CompareStringA
GetUserDefaultLCID
GetLastError
GetEnvironmentStrings
LoadLibraryA
SetHandleCount
HeapSize
HeapAlloc
ExitProcess
VirtualAlloc
HeapDestroy
GetCommandLineA
GetModuleFileNameA
GetVersionExA
VirtualQuery
HeapFree
TlsAlloc
GetCurrentThread
EnterCriticalSection
GetProcAddress
GetStringTypeW
InitializeCriticalSection
SetLastError
SetConsoleCtrlHandler
UnhandledExceptionFilter
GetStartupInfoA
HeapReAlloc
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
TlsFree
SetEnvironmentVariableA
MultiByteToWideChar
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStdHandle
InterlockedIncrement
GetDateFormatA
IsValidCodePage
SetUnhandledExceptionFilter
GetLocaleInfoW
GetConsoleOutputCP
HeapCreate
VirtualFree
CreateFileA
GetCPInfo
GetEnvironmentStringsW
InterlockedDecrement
DeleteCriticalSection
IsValidLocale
GetTimeZoneInformation
GetFileType
LCMapStringW
GetTimeFormatA
WriteConsoleW
GetProcessHeap
TerminateProcess
WriteConsoleA
RtlUnwind
LCMapStringA
IsDebuggerPresent
comctl32
InitCommonControlsEx
user32
GetClassInfoA
GetWindowLongA
IsClipboardFormatAvailable
GetClassWord
RegisterClassExA
LoadKeyboardLayoutA
CharNextExA
EndPaint
DialogBoxIndirectParamA
GetClassNameW
AppendMenuW
CloseWindowStation
RegisterClassA
CharLowerBuffA
WinHelpW
LookupIconIdFromDirectoryEx
GetSystemMenu
RealChildWindowFromPoint
SetKeyboardState
MessageBeep
GetClipCursor
gdi32
SetPaletteEntries
CreateEllipticRgn
BeginPath
FloodFill
CreateHalftonePalette
EqualRgn
StretchDIBits
PaintRgn
StartPage
StartDocA
GetTextCharset
CreateScalableFontResourceW
GetRandomRgn
Rectangle
PlayEnhMetaFile
GetMetaFileW
SetViewportExtEx
comdlg32
ChooseFontW
PrintDlgA
GetFileTitleW
Sections
.text Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ