Static task
static1
Behavioral task
behavioral1
Sample
c1c633a75643e2582c483ea73e6e9282_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1c633a75643e2582c483ea73e6e9282_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1c633a75643e2582c483ea73e6e9282_JaffaCakes118
-
Size
145KB
-
MD5
c1c633a75643e2582c483ea73e6e9282
-
SHA1
9aac95e8d86f59de9d2563e5600e48bd123f6450
-
SHA256
d13ca2bd5cc142e64b5a0c6f40eeabda965643fd3caa5ddc876871f1d2a8226c
-
SHA512
e0900bbd7c1f8337816a340599b921551d41b65a0f5c5161ca4f33564a95a386732b196313ebaf08903295bdb1868a5750cdb12c2d27a763a83c32f8b843da0e
-
SSDEEP
3072:vE/YrRLsCFUGgJQh2+OMVhLhj6Sf+w7GBMmUTIsrL4EEGLKrU0V7MnRTUO:rBsCFUxotj6SGoht0ELhbKnpml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c633a75643e2582c483ea73e6e9282_JaffaCakes118
Files
-
c1c633a75643e2582c483ea73e6e9282_JaffaCakes118.exe windows:5 windows x86 arch:x86
c39ad7567c8e2c08b995e86ba83c06ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetCommandLineA
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapCreate
AddAtomA
FindAtomA
AddConsoleAliasA
DeleteAtom
user32
CheckRadioButton
CheckMenuItem
GetDesktopWindow
CharNextA
CharLowerA
CheckDlgButton
CheckMenuRadioItem
CharPrevA
CharUpperA
shlwapi
StrStrIA
StrSpnA
UrlIsOpaqueA
StrStrA
gdi32
ResizePalette
GetDCPenColor
StartPage
SelectPalette
SetTextAlign
RealizePalette
SelectObject
UnrealizeObject
d3d8
Direct3DCreate8
shell32
DragFinish
ord152
ord66
ord153
ord240
ord680
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ