Static task
static1
Behavioral task
behavioral1
Sample
aea6340ae286c81d0d69c8afb0b9f986_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aea6340ae286c81d0d69c8afb0b9f986_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aea6340ae286c81d0d69c8afb0b9f986_JaffaCakes118
-
Size
132KB
-
MD5
aea6340ae286c81d0d69c8afb0b9f986
-
SHA1
1ec91a194e7b3b62dc31c6b6b32a3c48ac9ce80e
-
SHA256
078784bca3257efb9c32a42e2cfc9cda09ac2d0218538d4438d14c4be181501f
-
SHA512
16e170611bc5b8e343bb287af6a3a55cb4fb312beaf539da2c9d8f4f110291ecc1aa0c4e6481bf7b6fa42dad16d8eeec5f8ce85c982e1e70946ee2b2b33c71cf
-
SSDEEP
1536:+FeD/t/7WIDPKSqep2qOlqbViPg2b+qdyenyBN1M7J1CGZYIItkN:+FeJTruSJ9OlqbADbqen1CGZYIItkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aea6340ae286c81d0d69c8afb0b9f986_JaffaCakes118
Files
-
aea6340ae286c81d0d69c8afb0b9f986_JaffaCakes118.exe windows:4 windows x86 arch:x86
1af9c0e91450f61cb4ffc0a4cb2a57de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetTempFileNameW
GetModuleFileNameW
GetFileSize
OpenEventW
DeleteFileW
Sleep
WideCharToMultiByte
CreateProcessW
GetLastError
GetTempPathW
CloseHandle
CreateFileA
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
DuplicateHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
MultiByteToWideChar
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW
ExitProcess
CreatePipe
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
GetCommandLineA
GetCommandLineW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
HeapSize
ReadFile
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
LoadLibraryA
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
advapi32
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
wininet
HttpQueryInfoW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetAttemptConnect
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ