Static task
static1
Behavioral task
behavioral1
Sample
c0f22a71b9798578322fbcc8e44b1c4b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0f22a71b9798578322fbcc8e44b1c4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0f22a71b9798578322fbcc8e44b1c4b_JaffaCakes118
-
Size
368KB
-
MD5
c0f22a71b9798578322fbcc8e44b1c4b
-
SHA1
c9bbfa581e59b91dd6061467eb0ba5a9c6c9b4f8
-
SHA256
e5b3252692c3486339cf68799d3e19fe4ac530f3f09236167a6f01510a488e90
-
SHA512
7f1a9b843f2705b0c4288d79832a8fbb5f56979a22a979bb4e1d1a9353cb4edd8b7cb69a1544c21cde3e1d593b60de2cb9abcdfd924c686279a17cde2ca8cb89
-
SSDEEP
6144:oqzm7JdCXoyU4GN4Z2GdFcxJjtfYiO7JzQQLHs7CyccXD6PKUtsIZWn45YnvI1uT:o1CXoyUv4Z2GdFcxJ9YiOFvLM7CzPKUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0f22a71b9798578322fbcc8e44b1c4b_JaffaCakes118
Files
-
c0f22a71b9798578322fbcc8e44b1c4b_JaffaCakes118.exe windows:5 windows x86 arch:x86
78a618018c57f1c18fe1cfeb9866d2e1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
GetDriveTypeW
GetModuleFileNameW
MultiByteToWideChar
OpenMutexW
SetErrorMode
GetLogicalDrives
GetModuleHandleW
CreateFileW
QueryDosDeviceW
DeviceIoControl
CloseHandle
GetProcessHeap
WriteConsoleW
SetStdHandle
LoadLibraryW
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapSize
GetCurrentThreadId
SetLastError
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoW
SetEndOfFile
FindClose
GetLastError
FindFirstFileW
FindNextFileW
GetFileAttributesW
CopyFileW
GetFileAttributesExW
CreateDirectoryW
GetProcAddress
GetModuleHandleA
AreFileApisANSI
LocalFree
FormatMessageA
HeapFree
HeapAlloc
GetCPInfo
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
CompareStringW
LCMapStringW
GetTimeFormatA
GetDateFormatA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetEnvironmentVariableA
user32
DestroyWindow
GetMessageW
TranslateMessage
RegisterClassExW
GetWindowLongW
InSendMessageEx
SetWindowLongW
RegisterDeviceNotificationW
CreateWindowExW
UnregisterDeviceNotification
DispatchMessageW
CharToOemW
UnregisterClassW
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
CM_Get_Parent
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
CM_Request_Device_EjectW
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ