Static task
static1
Behavioral task
behavioral1
Sample
de35eb6956679a8e21db082ccb5eaa59_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de35eb6956679a8e21db082ccb5eaa59_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de35eb6956679a8e21db082ccb5eaa59_JaffaCakes118
-
Size
326KB
-
MD5
de35eb6956679a8e21db082ccb5eaa59
-
SHA1
5f73862f1bc45698c2cb1b354710f9b3a680e8db
-
SHA256
b343673f5917f9f060f4f150dfb714bbdb820d3f6e03d4f5d9342ce01452a8d6
-
SHA512
4c9ae29daf135332fd6d16a294401057fceed426f4a4c0a4db7b287cfbf250e7da4e34b3eaa294d2916a823fda6c98238256670369562e142209f88400aa8b03
-
SSDEEP
6144:1tesiDV5DoHX9BTo/9WyQli4H5sXodwrl9QiO8+U81XRlJFq6gysOYfp:1tesiDV5s39BTo/9WyQli4HKXodwLLOg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de35eb6956679a8e21db082ccb5eaa59_JaffaCakes118
Files
-
de35eb6956679a8e21db082ccb5eaa59_JaffaCakes118.exe windows:5 windows x86 arch:x86
21746da860df7020191430cfaf2cd8dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
RegQueryValueExA
ws2_32
WSACleanup
WSAStartup
wininet
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
netapi32
NetUserGetInfo
NetApiBufferFree
kernel32
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCommandLineA
GetCompressedFileSizeA
CloseHandle
UnlockFile
WriteFile
LockFile
SetFilePointer
ReadFile
CreateFileA
CreateMutexA
ExitProcess
OpenMutexA
Sleep
CreateProcessA
CopyFileA
GetModuleFileNameA
GetEnvironmentVariableA
GetShortPathNameA
GetCurrentProcess
MultiByteToWideChar
SetEnvironmentVariableA
CreateThread
SetFileAttributesA
GetLastError
CreateDirectoryA
GetLocalTime
GetVolumeInformationA
GetDriveTypeA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetModuleHandleW
GetProcAddress
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
IsDebuggerPresent
GetStdHandle
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetHandleCount
GetModuleHandleA
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RaiseException
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE