Static task
static1
Behavioral task
behavioral1
Sample
e09c4070e7a4b10752bfcb1bbd1d8f4c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e09c4070e7a4b10752bfcb1bbd1d8f4c_JaffaCakes118
-
Size
212KB
-
MD5
e09c4070e7a4b10752bfcb1bbd1d8f4c
-
SHA1
a70e1e4e2508433c307f42556367877d2b5f4f00
-
SHA256
c65e60aa0cad9998b5741e4fa255069d788c95068ab7c822c02b1958448485d3
-
SHA512
478d1489d1aed80e3da9863ab2bf34c23b6b6f852998fdbab89b41d82000029a90888b83d965a09fca8cdc725729cad1e6d5a0f5dbac6588dc432e9cf68bc56a
-
SSDEEP
3072:DB1S2qAFXUYq9BnpK3G59E/OEeebTo6qmRJ82ObYdx6gQDWeU1ZnyQ1t9N8:DB1/qLY6EmEeeb06q2J8OdM2znny2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e09c4070e7a4b10752bfcb1bbd1d8f4c_JaffaCakes118
Files
-
e09c4070e7a4b10752bfcb1bbd1d8f4c_JaffaCakes118.exe windows:5 windows x86 arch:x86
067844397edc76ed73e569385b4f6291
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
connect
kernel32
GetCommandLineA
WriteProcessMemory
lstrlenW
GetModuleFileNameW
Sleep
ReadProcessMemory
lstrcmpiA
GetModuleHandleA
GetCurrentProcess
VerLanguageNameA
AllocConsole
CloseHandle
lstrlenA
GetStartupInfoA
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetModuleHandleW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RtlUnwind
WriteFile
GetStdHandle
LoadLibraryA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringA
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcAddress
GetModuleFileNameA
lstrcpyA
CreateMutexA
GetLastError
lstrcmpA
lstrcatA
ExitProcess
FreeEnvironmentStringsA
user32
GetSubMenu
GetMessageA
UpdateWindow
DestroyIcon
PostQuitMessage
IsWindow
CallWindowProcA
DialogBoxParamA
EnableMenuItem
GetParent
MessageBoxA
MessageBoxW
gdi32
SelectPalette
SetBkMode
GetFontData
PolyTextOutA
BitBlt
DeleteDC
TextOutA
CreateDIBitmap
comdlg32
PrintDlgA
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ