Static task
static1
Behavioral task
behavioral1
Sample
f54a55f8642ca1ef78230e2582a5270f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f54a55f8642ca1ef78230e2582a5270f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f54a55f8642ca1ef78230e2582a5270f_JaffaCakes118
-
Size
950KB
-
MD5
f54a55f8642ca1ef78230e2582a5270f
-
SHA1
2495a90b0242bc8dca862c8432aee9872bc77792
-
SHA256
d098a9b1d2c22c6f1bf7e67fbb68b46bfd81a0a9eb4339debcf27aed58d784ee
-
SHA512
d60a997cb1924aec3ea8752e193794cfb321342120d45e1cc7b0249d209306cbfd1e8f3022288f37e23eab521444a4c19789a2b2e5538ed8b83ef8532b91b087
-
SSDEEP
24576:7MzBEZKdhi4rlPqYWExL7Cn1nkguDW49D6ifPAS:4dE4Ti4rlPDbLgkgs3F6if4S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54a55f8642ca1ef78230e2582a5270f_JaffaCakes118
Files
-
f54a55f8642ca1ef78230e2582a5270f_JaffaCakes118.exe windows:5 windows x86 arch:x86
e961a7b83efc7d5f44f543011a54bbf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThreadId
GetLastError
EnterCriticalSection
ReadFile
CloseHandle
FileTimeToSystemTime
TlsAlloc
GetModuleFileNameW
OutputDebugStringW
GetFullPathNameW
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
GetThreadLocale
GetStringTypeW
InterlockedIncrement
InterlockedDecrement
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
mpr
WNetGetLastErrorW
WNetGetUniversalNameW
user32
HideCaret
LoadAcceleratorsW
CheckRadioButton
DrawFrameControl
ActivateKeyboardLayout
OffsetRect
DestroyIcon
EndPaint
psapi
GetDeviceDriverBaseNameW
GetDeviceDriverFileNameW
GetProcessImageFileNameW
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wys1 Size: 667KB - Virtual size: 666KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ