Static task
static1
Behavioral task
behavioral1
Sample
f012064c651a1c6bd588afba6a6c9537_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f012064c651a1c6bd588afba6a6c9537_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f012064c651a1c6bd588afba6a6c9537_JaffaCakes118
-
Size
858KB
-
MD5
f012064c651a1c6bd588afba6a6c9537
-
SHA1
9b4efb58803389da26502df9886ca4d493014042
-
SHA256
7d075776043e3956b40c78ba4c2707a0715ab9b686b9afb549e9b6936584ba8c
-
SHA512
d1548503b2117bdc01e7d18b87ae58d322f202872a944b8bd6a7040a8dcc0fc609a78d0b9ee6f6a1d624fd3dbb83e932d8ef7c8fc23dec0dc764f4d914252855
-
SSDEEP
24576:wpm8C5UiDbBW1yiAU+h+Mo6FvQsETeYhXOFj:l8WDpqi+Mo6Fvp8J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f012064c651a1c6bd588afba6a6c9537_JaffaCakes118
Files
-
f012064c651a1c6bd588afba6a6c9537_JaffaCakes118.exe windows:5 windows x86 arch:x86
8c4f7b2ab8e0cc7d7ca468d8ec94c3b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GlobalSize
SetEvent
GetFileSize
GlobalLock
GetModuleHandleA
GetSystemDirectoryA
GetQueuedCompletionStatus
GetTickCount
SetErrorMode
PostQueuedCompletionStatus
CompareStringA
GetCurrentProcess
GlobalFree
WriteFile
InterlockedIncrement
MoveFileExW
GetLogicalDrives
SetLastError
LocalFree
GetSystemTimeAsFileTime
GetCurrentThreadId
lstrlenA
GetStdHandle
LoadLibraryA
Sleep
EnterCriticalSection
InterlockedExchange
CloseHandle
WaitForSingleObject
GlobalAlloc
LeaveCriticalSection
GetLastError
FlushInstructionCache
GetLocalTime
InitializeCriticalSection
FindClose
DebugBreak
ReadFile
SystemTimeToFileTime
HeapAlloc
HeapCreate
DeleteCriticalSection
ResetEvent
GetWindowsDirectoryA
GetProcessTimes
SetFilePointer
DeviceIoControl
GlobalUnlock
CreateIoCompletionPort
FreeLibrary
HeapDestroy
GetExitCodeProcess
GetModuleFileNameA
CreateThread
InterlockedDecrement
user32
EmptyClipboard
MonitorFromPoint
GetLastInputInfo
OpenClipboard
ShowWindow
GetDC
KillTimer
GetDoubleClickTime
IsWindow
ReleaseDC
SetForegroundWindow
TranslateMessage
TrackPopupMenu
GetSystemMetrics
GetSubMenu
CloseClipboard
PostQuitMessage
DestroyMenu
SetClipboardData
EnableMenuItem
SetTimer
DestroyWindow
GetCursorPos
gdi32
GetDeviceCaps
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
RegCloseKey
shell32
SHGetSpecialFolderPathW
SHEmptyRecycleBinW
ole32
CoTaskMemFree
OleUninitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
OleInitialize
oleaut32
SysFreeString
VariantClear
SysAllocStringLen
VariantInit
SysAllocString
winmm
timeGetTime
waveOutGetNumDevs
iphlpapi
GetAdaptersInfo
secur32
DeleteSecurityContext
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textes Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 226KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ