_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
c1f9d42a1eaf56e9afb619d083b630b4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1f9d42a1eaf56e9afb619d083b630b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1f9d42a1eaf56e9afb619d083b630b4_JaffaCakes118
-
Size
3.8MB
-
MD5
c1f9d42a1eaf56e9afb619d083b630b4
-
SHA1
3285790eb303cbf0f5ee8f5ac4140ffe9c7c05d1
-
SHA256
6ef4a971bfe68732c4cfc83bf38854d55975838cf317eb76435dd68664d0db56
-
SHA512
ba7f3b4b6e6c4dabed0fbd661aefd79558aa824e0551501937bb81cdceab77b2bc06d6fde7daa23d5f82502307c69ba674371deed57061095b6751abcb20cfa3
-
SSDEEP
98304:KZlfCDiidAxVcCs+ponxA9zo/77DE7rLPztNhgiC/:KZgdYaWpqA5o/7vE7nDhgh/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1f9d42a1eaf56e9afb619d083b630b4_JaffaCakes118
Files
-
c1f9d42a1eaf56e9afb619d083b630b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
3d16ac85159d43302636242bbea48e2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
EnumResourceNamesW
OpenFile
lstrlenA
WritePrivateProfileStructA
SetLocalTime
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
DeleteVolumeMountPointA
MoveFileExW
InterlockedDecrement
CreateJobObjectW
GetUserDefaultLCID
OpenSemaphoreA
ConnectNamedPipe
_lclose
GetProcessPriorityBoost
CreateNamedPipeW
GetSystemTimeAsFileTime
ReadConsoleW
SetCommTimeouts
TzSpecificLocalTimeToSystemTime
TlsSetValue
GlobalAlloc
Sleep
GetVersionExW
WriteConsoleW
IsDBCSLeadByte
GetTimeZoneInformation
lstrcatA
GetBinaryTypeW
SetThreadPriority
GlobalUnlock
DeactivateActCtx
SetCurrentDirectoryA
FillConsoleOutputCharacterW
GetLastError
GetTapeStatus
SetVolumeLabelW
ReadFileEx
EnterCriticalSection
_hwrite
SetFileApisToOEM
LoadLibraryA
OpenMutexA
SetCalendarInfoW
BeginUpdateResourceA
WriteProfileSectionW
AddAtomA
GetTapeParameters
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetModuleHandleA
LoadLibraryExA
FreeEnvironmentStringsW
VirtualProtect
EnumDateFormatsW
GetConsoleCursorInfo
WaitForDebugEvent
LocalSize
DebugBreak
lstrcpyA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
VirtualAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
HeapSize
CreateFileA
CloseHandle
user32
GetCursorPos
Exports
Exports
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.coj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ