Static task
static1
Behavioral task
behavioral1
Sample
ba4881a50c0f2fc3e889b19328cd5ede_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba4881a50c0f2fc3e889b19328cd5ede_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba4881a50c0f2fc3e889b19328cd5ede_JaffaCakes118
-
Size
490KB
-
MD5
ba4881a50c0f2fc3e889b19328cd5ede
-
SHA1
e645d24c4be529ebd288a3f5c7ffd5796edd8dc3
-
SHA256
0cb0dc4a3696c354b0a0b8aecfa134a3e8b77815af7a930ef1a6f595868d0f25
-
SHA512
9b8634bc21cc18b9614f6e903d98df1b154e11f2efaaa2950e3243de680e5874ecbd6b89a1ab27151f584c4123f37669bd46c31ef1beb2934b53fa38de3940cd
-
SSDEEP
6144:2WN1vOCA0lCgFoGeTGhN+Rs+0YUiKXITkFE7N8hpJC96kzlih1LD+wbQF2ifMeS+:2o1vFrYLKXk7ijM9Zih1H+wEaYJqrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4881a50c0f2fc3e889b19328cd5ede_JaffaCakes118
Files
-
ba4881a50c0f2fc3e889b19328cd5ede_JaffaCakes118.exe windows:4 windows x86 arch:x86
49e5b81a64c257d957ffccb2f19404c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LCMapStringA
MultiByteToWideChar
FlushFileBuffers
InitializeCriticalSection
IsValidLocale
GetStringTypeExA
SetEnvironmentVariableA
LeaveCriticalSection
MoveFileExA
GetConsoleOutputCP
GetCurrentProcessId
HeapAlloc
SetLastError
TlsGetValue
FreeLibrary
UnhandledExceptionFilter
GetCurrentProcess
GetLastError
GetDateFormatA
SetConsoleCtrlHandler
EnumSystemLocalesA
GetModuleHandleA
GetCurrentThreadId
SetUnhandledExceptionFilter
IsValidCodePage
TlsSetValue
GetStringTypeA
GetACP
FreeEnvironmentStringsA
GetThreadPriorityBoost
WaitForDebugEvent
CompareStringA
GetConsoleMode
WriteConsoleA
EnumDateFormatsExA
ReadConsoleOutputA
TerminateProcess
CloseHandle
GetConsoleCP
GetTimeFormatA
GetStdHandle
LoadLibraryA
GetCommandLineA
WideCharToMultiByte
GetProcAddress
FindClose
GetSystemTimeAsFileTime
ReadConsoleOutputCharacterA
SleepEx
GetVolumeInformationA
VirtualFree
CopyFileA
EnumTimeFormatsA
GetOEMCP
HeapReAlloc
GetStringTypeW
MoveFileExW
ConvertDefaultLocale
ReadFile
GetFileType
GlobalGetAtomNameW
GetModuleFileNameA
HeapFree
CreateMutexA
GetCurrentThread
GetTimeZoneInformation
TlsFree
LocalLock
ExitProcess
VirtualAlloc
EnumResourceTypesA
OpenMutexA
CreateFileA
SetHandleCount
WriteFile
HeapDestroy
VirtualQuery
GetLocaleInfoA
InterlockedExchange
ResetEvent
SetStdHandle
DeleteCriticalSection
Sleep
GetVersionExA
LCMapStringW
GetThreadSelectorEntry
RtlUnwind
IsDebuggerPresent
FoldStringW
WriteConsoleW
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
InterlockedIncrement
HeapSize
GetLocaleInfoW
GetEnvironmentStringsW
TlsAlloc
GetUserDefaultLCID
GetStartupInfoA
QueryPerformanceCounter
CreateDirectoryExW
GetTickCount
CompareStringW
SetFilePointer
GetCPInfo
FreeLibraryAndExitThread
HeapCreate
InterlockedDecrement
GetProcessHeap
comctl32
InitCommonControlsEx
user32
SubtractRect
CreateCaret
GetKBCodePage
SetDoubleClickTime
CreateWindowStationA
ClientToScreen
SetWinEventHook
RegisterClassExA
DdePostAdvise
DialogBoxIndirectParamA
SendMessageTimeoutA
GetScrollInfo
CharPrevExA
DdeAddData
TranslateAccelerator
SetMenuContextHelpId
RegisterClassA
DdeDisconnect
InsertMenuA
GetMenuState
GetCaretPos
DdeQueryConvInfo
VkKeyScanExA
GetMenuItemID
Sections
.text Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ