Static task
static1
Behavioral task
behavioral1
Sample
c1419d6271ebe4c00a1119de051e2b44_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1419d6271ebe4c00a1119de051e2b44_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1419d6271ebe4c00a1119de051e2b44_JaffaCakes118
-
Size
514KB
-
MD5
c1419d6271ebe4c00a1119de051e2b44
-
SHA1
e984565e50c5fac24198936062874e433f8a64ae
-
SHA256
13bca81a5c27712bc77e7acd99c6f86f0ec65c239b5fcfaa68528287403a9f30
-
SHA512
f46b6c32042b66b873dfdad6682be786ff970153acb11c7b4532863514d9258cfa9e38b99ba4e12eec7fd8f922fa1d452582c5669157ea8a1c79bff5e5ed6fb9
-
SSDEEP
3072:wqLPJ4JkjQwtxu+18ptifcnaxK247PnpWYqCqsenvff0rVkxI1a8n2PZmlz35:wqLx4JmRu9pCcnx2EprwHf0ru2aPZSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1419d6271ebe4c00a1119de051e2b44_JaffaCakes118
Files
-
c1419d6271ebe4c00a1119de051e2b44_JaffaCakes118.exe windows:5 windows x86 arch:x86
2b11f92a8a854fdeedcbb91eb46ecd40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetFileSize
ReadFile
GetCommandLineW
GetTempPathW
lstrcpyW
WaitForSingleObject
GetExitCodeProcess
ExitProcess
CloseHandle
GetTempFileNameW
lstrlenW
GetModuleFileNameW
SetEndOfFile
SetStdHandle
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetLocaleInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetLastError
FreeLibrary
GetProcAddress
lstrcatW
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
HeapFree
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
GetCPInfo
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
GetModuleHandleW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetProcessHeap
user32
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
CreateWindowExW
MessageBoxW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetUserNameW
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ