Static task
static1
Behavioral task
behavioral1
Sample
b8d459be2429fc333ff4b101ae65bdf7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8d459be2429fc333ff4b101ae65bdf7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8d459be2429fc333ff4b101ae65bdf7_JaffaCakes118
-
Size
652KB
-
MD5
b8d459be2429fc333ff4b101ae65bdf7
-
SHA1
9b490130216059a4375dc3463cc0bbd526555041
-
SHA256
5ade8675d34acbc8ee8c7a48dc34344de320a14de60c712c387ace498f34b0a2
-
SHA512
916551535a2b43f6fc818fece2c88775fede67d9e4a693f3d32d75d9a959d2cdf0ee9d104c6395250a1963fdf36ccaf32d04ae8a0368a8d77a8d5bb0dd74d3ff
-
SSDEEP
12288:HYlOZOO12inNf12s0A0FlyBJ+MGf/+ybmgnZzc0VHxzctl/:HCO3NfdoFlyBJUjTzzVHZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8d459be2429fc333ff4b101ae65bdf7_JaffaCakes118
Files
-
b8d459be2429fc333ff4b101ae65bdf7_JaffaCakes118.exe windows:5 windows x86 arch:x86
36c916c1f880563395546b54d1cc377e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
kernel32
VirtualAlloc
Sleep
CreateProcessA
SizeofResource
GetVersion
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
GetLastError
InterlockedIncrement
ExitProcess
CreateFileA
GetFileType
CreateFileW
GetModuleFileNameA
GlobalLock
FindFirstFileW
CompareStringW
GetProcAddress
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
LoadLibraryExW
UnhandledExceptionFilter
RemoveDirectoryA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
InitializeCriticalSection
SetLastError
FormatMessageA
InterlockedDecrement
LoadResource
GetEnvironmentVariableA
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
SetErrorMode
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
GetStdHandle
GetProcessHeap
GetCommandLineA
GetEnvironmentStringsW
TlsSetValue
TlsGetValue
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
LCMapStringW
FindClose
user32
MessageBoxA
SetDlgItemTextA
GetDesktopWindow
LoadCursorA
ScreenToClient
SetForegroundWindow
GetDlgItem
SetCapture
GetWindowRect
BeginPaint
SetFocus
GetWindowLongA
ShowWindow
UpdateWindow
GetParent
TrackPopupMenu
GetDC
IsWindow
SetWindowPos
PostQuitMessage
InvalidateRect
SendMessageA
GetClientRect
MapWindowPoints
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32
SysFreeString
SysAllocString
SysAllocStringLen
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 604KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ