Static task
static1
Behavioral task
behavioral1
Sample
dc5593f38a0bcdb11f382be8e4689907_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc5593f38a0bcdb11f382be8e4689907_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc5593f38a0bcdb11f382be8e4689907_JaffaCakes118
-
Size
148KB
-
MD5
dc5593f38a0bcdb11f382be8e4689907
-
SHA1
6b220e2271e73f5d3b6e4374c12cb774e1777eae
-
SHA256
e7297e84118c26a43ba007e8351d91deec962e327cf30369bcc0983d7e408089
-
SHA512
57ff1d1bd1aafe4e9f4ab55dc5710cee7d2966e2631e21770e273b7a6f23c81c3460ddeea6b938e9e1c7879d6f3f13b020f263bf566752ee5049dd2b95efb176
-
SSDEEP
3072:Pug5FVkt0XqVx895czEJUxcdWUICXBwt90:2gFkt0I84Zcd720
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc5593f38a0bcdb11f382be8e4689907_JaffaCakes118
Files
-
dc5593f38a0bcdb11f382be8e4689907_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c29d1bd951178440db28c90e483920e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CloseHandle
GetLastError
FreeLibrary
OpenProcess
GetCurrentProcessId
LoadLibraryW
GetProcAddress
FindFirstFileW
TerminateProcess
FindClose
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetModuleFileNameW
VirtualQuery
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileW
SetFilePointer
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
ReadFile
CreateFileA
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
Sections
.text Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ