Static task
static1
Behavioral task
behavioral1
Sample
f30ffc111e7f22d9f7536059ac034b1f_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
f30ffc111e7f22d9f7536059ac034b1f_JaffaCakes118
-
Size
380KB
-
MD5
f30ffc111e7f22d9f7536059ac034b1f
-
SHA1
b6406d4ce17817efd000733649bcb5de0729909f
-
SHA256
0ea41c34dab9e877011658a8ed6a4675e3e6699f2a8d96f9928165959adb9a93
-
SHA512
bd8fc40814e7b350784cb20d3b378a8265f28b19034d4a5997db8f357017792c80207bf43a50a696c41fa71155db78b8608cc18cecae78caa15cf058bcd10de3
-
SSDEEP
6144:wJg/L+qcDdhyFbG3/lmiJnwSiBTJDCppvJqq1SKSljYcJHPsiiGY4QbcIZ:wJg/SqcDOkdmiJwNBYppvcqklkYiGY4k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f30ffc111e7f22d9f7536059ac034b1f_JaffaCakes118
Files
-
f30ffc111e7f22d9f7536059ac034b1f_JaffaCakes118.exe windows:5 windows x86 arch:x86
52b3929233b8e5a073022baf253c703d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetLastError
GetCurrentProcess
GlobalAlloc
GetModuleHandleA
GetFileAttributesA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
VirtualProtect
GetFileSizeEx
TerminateProcess
Sleep
LocalFileTimeToFileTime
FileTimeToSystemTime
ReleaseSemaphore
PulseEvent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
GetCursor
GetWindowTextLengthA
GetClientRect
LoadIconW
SetCursorPos
UpdateWindow
LoadCursorW
msvcr90
_encode_pointer
strcpy
asin
_decode_pointer
_encoded_null
tan
_except_handler4_common
_crt_debugger_hook
_cexit
_amsg_exit
__FrameUnwindFilter
gdi32
FillPath
PlayMetaFileRecord
msimg32
AlphaBlend
msvcm90
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 327KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ