Static task
static1
Behavioral task
behavioral1
Sample
d0f13358bc9b566517417d2e441bf166_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0f13358bc9b566517417d2e441bf166_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0f13358bc9b566517417d2e441bf166_JaffaCakes118
-
Size
2.0MB
-
MD5
d0f13358bc9b566517417d2e441bf166
-
SHA1
fd131fa01ae4ffbdc7de98d7ee8b25cf9782ab9d
-
SHA256
9c36fb107d57385a7ed5c10026f2deb4109a00f8d77151febabb8306279c920d
-
SHA512
3796e07431f2afecb349f2fc57ebe34cf6caca7d4dfaf932a73af1028275f27049ab0f497f211b3c54134677542abdf1389abcfe94cdf099492487ccd3bcd185
-
SSDEEP
24576:FjsHQ43AWx9UeDS9f/rtUV+DCxizZOnVh9FfGSMxxaLBwdp87:ZsuE0m+uwADFOFFe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0f13358bc9b566517417d2e441bf166_JaffaCakes118
Files
-
d0f13358bc9b566517417d2e441bf166_JaffaCakes118.exe windows:5 windows x86 arch:x86
ab38d3eee477d88df89477f3330c55d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
LocalFree
VirtualAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
SetFilePointer
TzSpecificLocalTimeToSystemTime
FormatMessageW
GetNamedPipeInfo
lstrcmpiW
CreateMutexW
GetModuleHandleW
OutputDebugStringW
EnumResourceLanguagesW
GetTempPathW
FindNextFileW
MoveFileW
CreateNamedPipeW
GetCPInfo
GetLocaleInfoW
EnumCalendarInfoW
EnumTimeFormatsW
GetThreadLocale
GetSystemDefaultLangID
EnumUILanguagesW
GetConsoleWindow
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
LoadLibraryExW
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
CreateFileW
user32
IsChild
AttachThreadInput
CheckDlgButton
LoadAcceleratorsW
RemoveMenu
GetMonitorInfoW
WinHelpW
GetScrollInfo
WindowFromPoint
HideCaret
GetCursor
GetWindowTextLengthW
SetWindowRgn
wtsapi32
WTSUnRegisterSessionNotification
WTSEnumerateSessionsW
rasapi32
RasGetEntryPropertiesW
wininet
HttpQueryInfoW
InternetQueryOptionW
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 518KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.9ni39r Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.y2460d Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aaa51d Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cns0tr Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ