Static task
static1
Behavioral task
behavioral1
Sample
cd71299dfba856b2a9ec3ffb880ebad5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cd71299dfba856b2a9ec3ffb880ebad5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cd71299dfba856b2a9ec3ffb880ebad5_JaffaCakes118
-
Size
5.0MB
-
MD5
cd71299dfba856b2a9ec3ffb880ebad5
-
SHA1
e630635246663d5f8dbb87a7d09644f0b83d3fa3
-
SHA256
396d94f129bc31e0115927a1207ce6380638de2776e2d31c5e4f7ea9ed39652e
-
SHA512
03b2ae84c3c83bf3c18c6a924966f55edd66b196cb219eb92ded98275fe87b1a56a44e128e3ff46c2cb9e466f55fa8b7f2e817ae9795a5a9d96cd0f67e326dc6
-
SSDEEP
98304:ml2VNuhIKfrRyZZgWbfakxFz3Si8NhMeMKqiFNT2keUenQigIpv:E2V+IKdMqwF3SDwcqiFNT2FII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd71299dfba856b2a9ec3ffb880ebad5_JaffaCakes118
Files
-
cd71299dfba856b2a9ec3ffb880ebad5_JaffaCakes118.exe windows:5 windows x86 arch:x86
e062b8dbecf56f9bca4388987b11e34a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetSystemDirectoryW
GetSystemWindowsDirectoryA
DeleteVolumeMountPointW
LeaveCriticalSection
GetFileAttributesA
SetConsoleMode
Beep
WritePrivateProfileSectionW
GetTimeZoneInformation
MultiByteToWideChar
lstrlenW
GetStdHandle
GetLongPathNameW
GetThreadLocale
GetProcAddress
CreateJobSet
ReadFileEx
RemoveDirectoryA
PrepareTape
GetVolumePathNameW
CreateFileMappingA
LocalAlloc
WritePrivateProfileStringA
LockResource
FindNextFileA
WriteProfileStringA
GetModuleHandleA
VirtualProtect
GetConsoleCursorInfo
OpenSemaphoreW
AreFileApisANSI
CommConfigDialogW
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
LoadLibraryW
TlsSetValue
GetDateFormatA
GetWindowsDirectoryA
ConvertFiberToThread
GetTickCount
GetCommProperties
FindFirstFileExW
FlushConsoleInputBuffer
FindCloseChangeNotification
InterlockedCompareExchange
HeapFree
CreateJobObjectW
WritePrivateProfileSectionA
CommConfigDialogA
lstrlenA
CreateMutexW
DebugActiveProcess
GetFileSize
FillConsoleOutputCharacterA
GetTempFileNameW
GetComputerNameA
RegisterWaitForSingleObject
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateFileA
SetStdHandle
FlushFileBuffers
CreateFileW
user32
GetMonitorInfoA
GetMenuStringA
CreateCaret
GetMenuInfo
LoadImageW
advapi32
ObjectPrivilegeAuditAlarmW
GetServiceKeyNameA
ConvertToAutoInheritPrivateObjectSecurity
RegConnectRegistryA
ReportEventW
BackupEventLogW
GetAce
AddAuditAccessObjectAce
RegEnumKeyExA
PrivilegeCheck
CreateServiceA
EqualSid
LookupAccountNameA
RegQueryMultipleValuesW
DeleteAce
GetUserNameW
OpenEventLogW
RegisterEventSourceA
RegSetValueA
LookupPrivilegeNameW
SetAclInformation
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.8MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ