Static task
static1
Behavioral task
behavioral1
Sample
f6626e65f1eb82888caee56c3f658b89_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6626e65f1eb82888caee56c3f658b89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6626e65f1eb82888caee56c3f658b89_JaffaCakes118
-
Size
2.8MB
-
MD5
f6626e65f1eb82888caee56c3f658b89
-
SHA1
8a45d192c080a0923cbc2757df086d34b39c63e1
-
SHA256
41aff36e468738584879894efb4062f634c5bfe9c9300db8e15fe3f638f85f95
-
SHA512
10ec80ec7db80e0c39f48d688a06ca3cde6c4dd37a26dc872967f3d663cc2dc2dd26d2211877c23e72f965189ab784fd851f0e45f3e2899ab96070957e5fa877
-
SSDEEP
49152:2hUacRT39VIQfT3WUacRT39VIQfTzWUacRT39VIQfTfWUacRT39VIQfT:2hUzRjwQfjWUzRjwQfHWUzRjwQfLWUzJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6626e65f1eb82888caee56c3f658b89_JaffaCakes118
Files
-
f6626e65f1eb82888caee56c3f658b89_JaffaCakes118.exe windows:5 windows x86 arch:x86
a262877a36fc7e0f830054e0f70f76cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetOEMCP
HeapFree
Sleep
LoadLibraryW
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
IsValidCodePage
VirtualProtect
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
HeapReAlloc
mpr
WNetCancelConnectionA
WNetCancelConnectionW
WNetGetUniversalNameW
WNetGetProviderNameW
WNetGetProviderNameA
WNetGetNetworkInformationA
WNetGetResourceParentA
ole32
CreateDataCache
CreateILockBytesOnHGlobal
StringFromIID
HBITMAP_UserFree
OleInitializeWOW
OleQueryLinkFromData
avifil32
AVIFileOpen
AVIFileCreateStreamA
AVISaveW
AVIStreamGetFrameOpen
AVIFileWriteData
avicap32
capGetDriverDescriptionW
msvfw32
ICClose
ICInfo
setupapi
SetupDiGetHwProfileListExA
SetupGetInfInformationA
SetupDiDrawMiniIcon
loadperf
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
gdi32
GetFontUnicodeRanges
GetDeviceCaps
GetEnhMetaFileDescriptionW
shlwapi
ord29
PathGetArgsW
ord432
ord158
rpcrt4
RpcNsBindingInqEntryNameW
I_RpcMapWin32Status
winmm
waveOutSetVolume
mmioWrite
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.l2 Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l2 Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l2 Size: 714KB - Virtual size: 714KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ