Static task
static1
Behavioral task
behavioral1
Sample
c8830b9e611ef52f5d4dcddee87c2ba1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8830b9e611ef52f5d4dcddee87c2ba1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8830b9e611ef52f5d4dcddee87c2ba1_JaffaCakes118
-
Size
231KB
-
MD5
c8830b9e611ef52f5d4dcddee87c2ba1
-
SHA1
fc7f516a1cc9916405e1f15f0be2432b356efe86
-
SHA256
0111dff6d3ba584e0293470dac4cdf629e61f842522ef2d4a3873ebf9dd703a8
-
SHA512
dca8de414cf9d841283184931d9977a299ad7ac47019330a464c10a69e2e9c98131c2e7cfdb658494c1f32975efde3f58128f2fcaad1046c8f495b6af8d845a9
-
SSDEEP
3072:JvOR1bc6l7Z/nJEpq/i8vJiEXQwd6yk0MD0feO4MuTrRn8XmLJhVsPH:V4DJX/zrrv4M3WLJAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8830b9e611ef52f5d4dcddee87c2ba1_JaffaCakes118
Files
-
c8830b9e611ef52f5d4dcddee87c2ba1_JaffaCakes118.exe windows:5 windows x86 arch:x86
4f1eefef02d151ff3b28aa1a14f3fb06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapCompact
TryEnterCriticalSection
lstrlenA
AllocConsole
GetCPInfo
BuildCommDCBAndTimeoutsA
UpdateResourceA
SetConsoleTextAttribute
GetCommState
ReadConsoleA
InterlockedDecrement
ZombifyActCtx
SetDefaultCommConfigW
GetEnvironmentStringsW
CancelWaitableTimer
GetCommProperties
GetModuleHandleW
CancelDeviceWakeupRequest
WriteFile
GetPriorityClass
GetVolumeInformationA
LoadLibraryW
GetCalendarInfoW
FreeConsole
WriteConsoleOutputA
GetStringTypeExW
LocalReAlloc
GetModuleFileNameW
CreateActCtxA
lstrcatA
GetConsoleAliasesW
GetLastError
AttachConsole
HeapUnlock
ReadFileEx
ResetEvent
LocalAlloc
VirtualLock
HeapLock
FindAtomA
WTSGetActiveConsoleSessionId
LoadLibraryExA
GetConsoleTitleW
VirtualProtect
QueryDepthSList
GetSystemTime
CopyFileExA
lstrcpyA
CompareStringW
CompareStringA
CreateFileA
GetTimeZoneInformation
WriteConsoleW
Sleep
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
GetModuleFileNameA
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
HeapCreate
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
SetStdHandle
RtlUnwind
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
user32
RealChildWindowFromPoint
EndPaint
msimg32
TransparentBlt
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xukesir Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yovuma Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tuf Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ