Static task
static1
Behavioral task
behavioral1
Sample
abbbe23982dd3057cc0ad71738b29b9a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
abbbe23982dd3057cc0ad71738b29b9a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abbbe23982dd3057cc0ad71738b29b9a_JaffaCakes118
-
Size
387KB
-
MD5
abbbe23982dd3057cc0ad71738b29b9a
-
SHA1
116979dfc056cb8a3e8a6ef045defbb79753294c
-
SHA256
f4339ea459a2367efc41d13ad1e437e75490586e6a736ddce056a258c671a2d0
-
SHA512
6008376d1396e35ea743aeb8c378b67a81e657d3e47f4ca2db265932248c53962e253b9a1c24c47a8c16d294e31876cc2c731e1e13c6264ec8331a5bd5490edd
-
SSDEEP
6144:47HJbu7a2Pg1pvysrg+6bR+9s7S+IgclqPLr2jBf4r0o5HEalXGKo8:4LJWa2PSRyrJAgK4ruBAB1lXGy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abbbe23982dd3057cc0ad71738b29b9a_JaffaCakes118
Files
-
abbbe23982dd3057cc0ad71738b29b9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
662ddbf232e256c82cb6f275d8cc84eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFileEx
InterlockedDecrement
ReadFile
GetSystemTimeAsFileTime
GetCommandLineA
GetStdHandle
GetTimeZoneInformation
ExitProcess
SetFilePointer
GetDateFormatA
InterlockedIncrement
CompareStringW
SetHandleCount
SleepEx
GetLocaleInfoW
EnumTimeFormatsW
SetFileAttributesA
FreeLibrary
CreateSemaphoreA
HeapDestroy
GetModuleHandleA
WriteFile
GetTimeFormatA
GetConsoleCP
HeapAlloc
GetStringTypeW
FreeEnvironmentStringsW
GetCPInfo
GetCurrentProcess
VirtualAlloc
GetProcessHeap
GetTickCount
HeapCreate
VirtualQueryEx
LeaveCriticalSection
GetEnvironmentStrings
GetStartupInfoW
GetCommandLineW
TlsSetValue
GetModuleFileNameA
TerminateProcess
InitializeCriticalSection
WriteConsoleW
FlushFileBuffers
GetEnvironmentStringsW
GetCurrentProcessId
TlsAlloc
CloseHandle
IsValidCodePage
UnhandledExceptionFilter
TlsGetValue
LCMapStringA
GetFileType
LoadLibraryA
SetStdHandle
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapReAlloc
LCMapStringW
VirtualFree
QueryPerformanceCounter
InterlockedExchange
CreateFileA
FindResourceW
CreateMutexA
EnumSystemLocalesA
GetOEMCP
GetCurrentThread
HeapFree
GetCurrentThreadId
GlobalFindAtomA
GetLocaleInfoA
SetLastError
EnterCriticalSection
MultiByteToWideChar
FreeEnvironmentStringsA
GetProcAddress
WideCharToMultiByte
GetLastError
GetConsoleMode
OpenMutexA
WriteConsoleA
GetStartupInfoA
SetConsoleCtrlHandler
RtlUnwind
GetVersionExA
IsValidLocale
HeapSize
Sleep
SetEnvironmentVariableA
IsDebuggerPresent
EnumDateFormatsExA
GetExitCodeThread
TlsFree
DeleteCriticalSection
GetACP
CompareStringA
GetConsoleOutputCP
GetUserDefaultLCID
GetStringTypeA
GetProfileStringW
shell32
SheChangeDirExW
user32
MonitorFromWindow
SetWindowLongW
IsCharAlphaNumericW
GetProcessDefaultLayout
RegisterClassExA
SetClipboardViewer
GetCursor
DrawEdge
LoadIconW
IsWindowEnabled
RegisterClassA
PostMessageW
CheckDlgButton
GetClipboardViewer
UpdateWindow
CountClipboardFormats
SendIMEMessageExA
GetAncestor
EnumDisplaySettingsA
SendIMEMessageExW
comctl32
InitCommonControlsEx
gdi32
SetBitmapBits
DrawEscape
CreateBrushIndirect
FloodFill
GetTextColor
PolylineTo
PlgBlt
GetEnhMetaFileHeader
AnimatePalette
EqualRgn
Pie
GetArcDirection
CloseFigure
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ