Static task
static1
Behavioral task
behavioral1
Sample
cf276fec3ce9546405cdb5506b8eebf0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf276fec3ce9546405cdb5506b8eebf0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf276fec3ce9546405cdb5506b8eebf0_JaffaCakes118
-
Size
177KB
-
MD5
cf276fec3ce9546405cdb5506b8eebf0
-
SHA1
fedd27a6d6e65dfe7316a692a98441a69d16593d
-
SHA256
4d2ac0462e574193459d530d06df065def5efe27c4926ce6a34b3b7adb048f45
-
SHA512
8e4c9b000eaaad92bc829e64b05345accd36ff6496b6c0c77c86fb58ee649c8a5cd0faed695901e68d73730d3a849a4bb441de88c6fc32afefe3838845615454
-
SSDEEP
3072:+X/PBYKSuJE7dAhjjPbHKNBvjowW+hJ/Uy99N0/C4A/QU9ioyRv7v9KuR:aPBYiJ0AhubrJW+hnF4A/j9ioyF7EE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf276fec3ce9546405cdb5506b8eebf0_JaffaCakes118
Files
-
cf276fec3ce9546405cdb5506b8eebf0_JaffaCakes118.exe windows:5 windows x86 arch:x86
c5094e0e0cededf45e52961dacf8b074
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetUserDefaultLCID
GetTickCount
GetProcessHeap
GlobalAlloc
HeapCreate
GetModuleFileNameW
CreateFileW
GetLastError
CloseHandle
lstrlenA
HeapSize
SetEndOfFile
SetStdHandle
SetFilePointer
SetEnvironmentVariableA
CompareStringW
ReadFile
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
WriteConsoleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapFree
GetFileAttributesA
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateFileA
LoadLibraryW
user32
ClientToScreen
GetWindowRect
TrackPopupMenu
GetSubMenu
LoadMenuA
GetWindowTextA
DefWindowProcA
CreatePopupMenu
IsWindow
DestroyMenu
GetWindow
GetShellWindow
gdi32
GetTextMetricsA
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ