Static task
static1
Behavioral task
behavioral1
Sample
dec411f840e2989418de529156a8d2d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dec411f840e2989418de529156a8d2d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dec411f840e2989418de529156a8d2d2_JaffaCakes118
-
Size
735KB
-
MD5
dec411f840e2989418de529156a8d2d2
-
SHA1
6ab0ec55393730036b7a5282d43b7223c33dfe69
-
SHA256
036b77b4eabe8a3edf80ba018287afc5790a30c95e93517ca27d00f8d4de11e3
-
SHA512
6dc242fde0787a5f24c9863066fbce0416d2c7728cfefad27e358de87dc210294f63e3d4259394776ee2b249c4eba6166456bfb0ed374bd1876e396be32ca230
-
SSDEEP
12288:VyOyGCo9oL/F7ZazyVVIDZ6GjmPgTp90uBniZ724/2lUeW8QfdmN/0Jj5uFxnAO6:oGC/gcG6pPgTpDnM7VxJf8N/EAFxnAf4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dec411f840e2989418de529156a8d2d2_JaffaCakes118
Files
-
dec411f840e2989418de529156a8d2d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a3c42dc9cf8638e9af61f61e5b1c927
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
MoveFileExW
GetConsoleOutputCP
GetSystemTimeAsFileTime
VirtualAlloc
GetTempFileNameW
GetTempPathW
LCMapStringA
WriteConsoleA
LoadLibraryA
LeaveCriticalSection
EnumCalendarInfoExA
GetOEMCP
SetHandleCount
TlsSetValue
InterlockedExchange
SetFilePointer
GetCommandLineA
VirtualQuery
SetConsoleScreenBufferSize
FreeEnvironmentStringsW
HeapValidate
AddAtomW
GetPriorityClass
GetFileType
GetConsoleCursorInfo
GetProcessShutdownParameters
GetTimeZoneInformation
EnterCriticalSection
SetLastError
HeapDestroy
TlsFree
GetModuleHandleW
CreateFileA
IsValidCodePage
GetLastError
MultiByteToWideChar
lstrlenA
GetCurrentThreadId
Sleep
VirtualFree
ExitThread
SetCurrentDirectoryW
GetCurrentProcessId
SetConsoleCtrlHandler
GetTimeFormatA
CompareStringA
GetCommandLineW
CompareStringW
GetTimeFormatW
OpenProcess
OpenMutexA
GetStringTypeA
InterlockedIncrement
HeapAlloc
SetSystemTime
RaiseException
EnumCalendarInfoW
CreateMutexA
InterlockedDecrement
LoadLibraryExW
SetUnhandledExceptionFilter
HeapSize
GetStdHandle
GetModuleFileNameW
FreeLibrary
TlsAlloc
WriteFile
GetStringTypeW
HeapFree
TerminateProcess
OutputDebugStringW
VirtualLock
WriteConsoleW
GetLocaleInfoA
IsDebuggerPresent
GetModuleFileNameA
LCMapStringW
CloseHandle
EnumResourceLanguagesA
QueryPerformanceCounter
LoadLibraryW
HeapReAlloc
HeapCreate
GetCurrentThread
GetUserDefaultLCID
GetFileAttributesW
DebugBreak
ReleaseSemaphore
IsBadReadPtr
WideCharToMultiByte
TlsGetValue
FlushFileBuffers
GetConsoleCP
InitializeCriticalSectionAndSpinCount
ReadFile
GetDateFormatA
ReadConsoleOutputCharacterW
GetConsoleMode
GetProcessHeap
GetStartupInfoW
SetStdHandle
SetEnvironmentVariableA
EnumSystemLocalesA
GetStartupInfoA
DeleteCriticalSection
GetModuleHandleA
IsValidLocale
GetACP
OutputDebugStringA
RtlUnwind
GetTickCount
GetProcAddress
GetEnvironmentStringsW
ExitProcess
GetCPInfo
GetLocaleInfoW
GetCurrentProcess
user32
CreateMDIWindowW
DefFrameProcA
DestroyCaret
RegisterClassA
DdeAccessData
RegisterClassExA
comctl32
InitCommonControlsEx
Sections
.text Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ