Static task
static1
Behavioral task
behavioral1
Sample
b3f7eda11a19c8d28c8f6cc6f9a31d9f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3f7eda11a19c8d28c8f6cc6f9a31d9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3f7eda11a19c8d28c8f6cc6f9a31d9f_JaffaCakes118
-
Size
205KB
-
MD5
b3f7eda11a19c8d28c8f6cc6f9a31d9f
-
SHA1
4d46adfe0e315c539e5a0a35a2baaa6a0555a820
-
SHA256
49f8ae6c7b889518232b87c4d134463a21a710f86a1d45eda15c542a8487acae
-
SHA512
b7297ff2e08ad4dfc51f8926741ca4920dd83d2e67e8ca88ae03bd174ab82d1d1cb539a1874da34b2c3bdecb9d3ec201b91a17dd112f82e8566c2c3cce33dd02
-
SSDEEP
6144:s67I09EYxk4qi3Wt3JhkaWjyxTUE5dYaYopu0:37LTxkx6e33kaWjyTG1K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3f7eda11a19c8d28c8f6cc6f9a31d9f_JaffaCakes118
Files
-
b3f7eda11a19c8d28c8f6cc6f9a31d9f_JaffaCakes118.exe windows:5 windows x86 arch:x86
b52cf2c743bfb71fa69c16695a772737
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
lstrcmpiA
lstrlenA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualFree
UnmapViewOfFile
VirtualAlloc
CloseHandle
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
LeaveCriticalSection
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcatA
lstrcpyA
FreeLibrary
TerminateThread
WaitForSingleObject
GetFileAttributesExA
ExpandEnvironmentStringsA
GetTickCount
lstrcpynA
DeleteCriticalSection
SearchPathA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
Sleep
RtlUnwind
GetLastError
CreateThread
GetCurrentThreadId
ExitThread
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
MultiByteToWideChar
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
InitializeCriticalSectionAndSpinCount
CreateFileA
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
user32
GetParent
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
ole32
CoInitialize
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE