Static task
static1
Behavioral task
behavioral1
Sample
abea16e12553526c9a15f293478a5e4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abea16e12553526c9a15f293478a5e4c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abea16e12553526c9a15f293478a5e4c_JaffaCakes118
-
Size
328KB
-
MD5
abea16e12553526c9a15f293478a5e4c
-
SHA1
2dc158ce0626296f1223d3d7942e4c11db492f45
-
SHA256
a973f3747dabf94c1617dff1915ae20f251d998f3d16b4e3e4cb8e19ff80eaba
-
SHA512
06f4a73dd7dc05dc42f9cc09bb1e08db23fcd78d6e3e44911fc726dfe9348565a0827257a7925a8560f2c9804e50883d99e830eadc7513b337986c97f18966d8
-
SSDEEP
6144:VXcuiJ/AkXu3KwPBzujpALo8DueIiIxcs/4Opy+8z1c:u1A8XyN2iQpy9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abea16e12553526c9a15f293478a5e4c_JaffaCakes118
Files
-
abea16e12553526c9a15f293478a5e4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
942c36968048de236c40cbeca69b1e80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetLastError
CompareStringW
CompareStringA
FlushFileBuffers
CloseHandle
CreateFileA
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetModuleHandleA
ExitProcess
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
GetTimeZoneInformation
HeapSize
MultiByteToWideChar
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
user32
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
Sections
.text Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE