Static task
static1
Behavioral task
behavioral1
Sample
dc5971921dfb748051650695297af2d1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc5971921dfb748051650695297af2d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc5971921dfb748051650695297af2d1_JaffaCakes118
-
Size
159KB
-
MD5
dc5971921dfb748051650695297af2d1
-
SHA1
d5fdcb74a72bcbf37970b73583652f180df531e8
-
SHA256
a771d6d97925e657f893c67e1065c79a17414994d6a1afef31458751c962a39d
-
SHA512
76606b8b089cadfc7e039477339dcf16d6e6c3fa8d7ecff9a95db44563310d7c8026ed19c6c6d9c6bedfd2b9df6f926809c37925bf6076720e83e0b0bfc91014
-
SSDEEP
3072:HKfI2tN1kjfmNS5m4yZm2XTKn4bQwPm719X10jh6SFJYfPgZy8Itr:HKfI2Jkr5m4CTBQ/7b10jh/FJgPgZy8g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc5971921dfb748051650695297af2d1_JaffaCakes118
Files
-
dc5971921dfb748051650695297af2d1_JaffaCakes118.exe windows:5 windows x86 arch:x86
5b7e75288f9ff05a1547425fe482a04c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CreateSemaphoreA
GetProcAddress
GetModuleHandleA
CreateMutexA
GetStdHandle
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
GetOEMCP
GetVersionExA
EnumSystemLocalesA
GetLocaleInfoA
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
Sleep
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
user32
LoadCursorA
GetWindowDC
LoadIconA
ReleaseDC
SetWindowTextA
LoadCursorFromFileA
crypt32
CryptStringToBinaryA
rtm
RtmReleaseRouteInfo
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ