Static task
static1
Behavioral task
behavioral1
Sample
b5f754a57f1c9e6b5985c3f28c483172_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b5f754a57f1c9e6b5985c3f28c483172_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5f754a57f1c9e6b5985c3f28c483172_JaffaCakes118
-
Size
488KB
-
MD5
b5f754a57f1c9e6b5985c3f28c483172
-
SHA1
29925e8dc3c4073e6600da19c0d84b6b87bd550a
-
SHA256
46ed66199569e4e69b43dab9b28fe53154fcc6b0a46ec13e079a576c088d9b2d
-
SHA512
980e88ebd3481688eba4e1031cf21eec982f66b3acbfcd82325234f89c8fd1fd5644404b41e481acec4b8a6f8b2fe783ebf96c7a10c8b8919f1141ff66a2846b
-
SSDEEP
12288:3UxPxNisaxiae3X//LYZS9pKZryzFblkRpL/:Swsa4ae3ss90Z+zFk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5f754a57f1c9e6b5985c3f28c483172_JaffaCakes118
Files
-
b5f754a57f1c9e6b5985c3f28c483172_JaffaCakes118.exe windows:5 windows x86 arch:x86
74689eb5ca42e46204f9fd838a4be159
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
ws2_32
closesocket
kernel32
lstrcpyA
Sleep
lstrcatA
lstrcmpiA
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
WriteConsoleA
VerLanguageNameA
AllocConsole
WriteProcessMemory
lstrlenW
GetModuleFileNameW
ReadProcessMemory
GetCommandLineA
GetProcAddress
GetLastError
CreateMutexA
GetModuleFileNameA
LoadLibraryA
lstrlenA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
ExitProcess
LCMapStringA
LCMapStringW
lstrcmpA
TlsAlloc
SetEnvironmentVariableA
CompareStringW
MultiByteToWideChar
CompareStringA
IsValidCodePage
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
user32
MessageBoxA
GetParent
DefWindowProcA
GetWindowLongA
DestroyIcon
CallWindowProcA
PostQuitMessage
SetTimer
MessageBoxW
gdi32
SelectObject
SetBkMode
CreateCompatibleDC
TextOutA
CreateDIBitmap
shell32
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ