Static task
static1
Behavioral task
behavioral1
Sample
ea3379123d647b3d725f66e785da83fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ea3379123d647b3d725f66e785da83fc_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ea3379123d647b3d725f66e785da83fc_JaffaCakes118
-
Size
790KB
-
MD5
ea3379123d647b3d725f66e785da83fc
-
SHA1
33a120064e82f37e2819264d8acee522c138f828
-
SHA256
908f5670aa6e5195e8380ca2613349a85a2ed9b7c6e23d70b89a74d1ff871db0
-
SHA512
a0adcc3738fa4b185c1b00bcb43ac18e89005b8433ceff093f76e09eae9622e5c61fd931856d01c49677dc2ab75ee05b0932d480af6eeeee2b919feb86bfaa34
-
SSDEEP
24576:1pABpKlurnOtfbWFJx0zq8fnBd0+CYc3yJ:1OAkLOoEzRv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea3379123d647b3d725f66e785da83fc_JaffaCakes118
Files
-
ea3379123d647b3d725f66e785da83fc_JaffaCakes118.exe windows:5 windows x86 arch:x86
a36bdec748929a66b07eaf9aacd1054e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
OpenMutexW
CreateFileMappingA
LoadLibraryA
GetModuleHandleA
DeleteFileA
DeleteFileW
CopyFileA
SetLocaleInfoW
SetConsoleMode
GetCurrentProcess
GetCurrentThread
WaitForSingleObject
GetFileSize
ReadFile
OpenSemaphoreW
DosDateTimeToFileTime
CreateFileW
GetFileAttributesA
GetFileAttributesW
CopyFileW
GetACP
SetLocaleInfoA
SetThreadLocale
SetConsoleTitleA
LoadLibraryW
WaitForMultipleObjectsEx
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
SetProcessAffinityMask
GetFileType
CloseHandle
GetCurrentThreadId
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
EncodePointer
DecodePointer
RaiseException
FormatMessageW
WideCharToMultiByte
TryEnterCriticalSection
GetLastError
QueueUserWorkItem
RtlCaptureStackBackTrace
QueryPerformanceFrequency
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
DuplicateHandle
GetExitCodeThread
GetNativeSystemInfo
RtlUnwind
FreeLibrary
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameA
HeapFree
HeapAlloc
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
GetCommandLineA
GetCommandLineW
SetConsoleCtrlHandler
OutputDebugStringA
OutputDebugStringW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
SetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
user32
OpenIcon
ShowWindow
FindWindowW
SetWindowPos
IsWindow
FindWindowA
gdi32
GetPixelFormat
advapi32
SystemFunction036
AddAccessAllowedAce
Sections
.text Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ