Static task
static1
Behavioral task
behavioral1
Sample
b2781f7cf158747e35db3f6a1414e409_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2781f7cf158747e35db3f6a1414e409_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2781f7cf158747e35db3f6a1414e409_JaffaCakes118
-
Size
266KB
-
MD5
b2781f7cf158747e35db3f6a1414e409
-
SHA1
28e8be993dbf17604089d6ca58d21ee4ea765695
-
SHA256
d29e4d586e3858cc67480254365051f29bb6686746004d89271393c5258fd172
-
SHA512
8688053280b9d7dc60edf472b9a2076fbbab531b25d80d736ddb79d1a58a0a2094f0764397c89b46761a9c682bbfb4256de285dc19dad74d4a3188fa7e940a30
-
SSDEEP
6144:V1V9KnstM7lWteKik399z575gOhyDS1ZOmLZbZ/:/KsK7cUe9z03DaZbLZb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2781f7cf158747e35db3f6a1414e409_JaffaCakes118
Files
-
b2781f7cf158747e35db3f6a1414e409_JaffaCakes118.exe windows:5 windows x86 arch:x86
8792a4bcd14508d0ab5d693efe621d76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetComputerNameA
GetCurrentProcessId
GetCommandLineA
GetTickCount
GlobalAlloc
SetEvent
GetVersionExA
GetStdHandle
CreateSemaphoreA
Sleep
GetEnvironmentStringsW
GetPriorityClass
GetEnvironmentStrings
CreateMutexA
CreateEventA
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetCurrentThread
VirtualAlloc
IsDebuggerPresent
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
SetEnvironmentVariableA
shell32
SHFileOperationW
SHOpenFolderAndSelectItems
scarddlg
ord2
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ