Static task
static1
Behavioral task
behavioral1
Sample
c5812a6d0c2a68bc656040a8cc0155a8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c5812a6d0c2a68bc656040a8cc0155a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c5812a6d0c2a68bc656040a8cc0155a8_JaffaCakes118
-
Size
352KB
-
MD5
c5812a6d0c2a68bc656040a8cc0155a8
-
SHA1
95f75102e0c405c31948e3d90ceef171ec4623fd
-
SHA256
8ec41d21f41d9b5bc67144f96248d6d22fc66cc43cae5d59db4385ff3c207f57
-
SHA512
83dc9b38e47758a30085e31f390096ccc7415ef67221aa02230af69c911a929704fdcbe0fcc64fc3b1b6af04ee55f11421f8b836d56c417685e46c9a426fd2a6
-
SSDEEP
3072:gfXBgU55IF7frLVYUwtqTr84c4ryLg48kP8q9fV/l/Fnk+1CyDNiidY/I7:OXW1rLV/wtqT3ragnSz7/jl7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5812a6d0c2a68bc656040a8cc0155a8_JaffaCakes118
Files
-
c5812a6d0c2a68bc656040a8cc0155a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
1fe8d4acec92218ee6b6cfb4fc32741c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
GetProcAddress
WriteConsoleOutputCharacterA
GlobalAlloc
TerminateThread
SetLastError
GetSystemTimeAdjustment
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
FlushFileBuffers
GetConsoleMode
GetThreadTimes
GetModuleHandleW
VirtualProtect
ExitProcess
CloseHandle
FindAtomA
EnumTimeFormatsW
AddAtomW
FindFirstChangeNotificationA
GetLastError
GetCurrentDirectoryW
LocalFree
GetConsoleCP
LoadLibraryA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
MultiByteToWideChar
ReadFile
Sleep
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
SetStdHandle
user32
SetThreadDesktop
PeekMessageA
ScrollWindow
CreateWindowExA
LookupIconIdFromDirectory
LoadIconW
GetNextDlgTabItem
GetMenuInfo
GetParent
gdi32
SetTextColor
StretchDIBits
SetPolyFillMode
SetPixel
SetPixelV
SetStretchBltMode
CreateCompatibleDC
CreateDiscardableBitmap
SetViewportOrgEx
StretchBlt
advapi32
ReportEventW
msimg32
GradientFill
winhttp
WinHttpCloseHandle
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 166KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ