Static task
static1
Behavioral task
behavioral1
Sample
fb074c6539e52ee74feacf6b74b28fd4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb074c6539e52ee74feacf6b74b28fd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb074c6539e52ee74feacf6b74b28fd4_JaffaCakes118
-
Size
2.3MB
-
MD5
fb074c6539e52ee74feacf6b74b28fd4
-
SHA1
5b611f3aff1725a24eaa1c6592d8becd83ea494c
-
SHA256
23895e613b1066aa67f70d1879cc26820ef53302a0a637d019fcc8a88aba28a8
-
SHA512
5411af0fc4e79c1de3f84a0d3ce4647d2915f01c373e937a37ad905a6b720697acef01852262fa756894762894729a4606b6fddc75e164cfc81c2e8cdefed4c4
-
SSDEEP
49152:6DcdLmppjHVMDdMpA4ZnetgvJ9cNpCTd8db:6D+Q1w4MteJ6NpCTd8db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb074c6539e52ee74feacf6b74b28fd4_JaffaCakes118
Files
-
fb074c6539e52ee74feacf6b74b28fd4_JaffaCakes118.exe windows:5 windows x86 arch:x86
93721cc6badfdf7a820a95ef9f90e96e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
VirtualAlloc
GetLastError
CloseHandle
GetSystemTime
FileTimeToLocalFileTime
ConnectNamedPipe
ReadFileScatter
CreateFileMappingW
GetModuleFileNameW
GetSystemDirectoryW
ReplaceFileW
FindCloseChangeNotification
GetConsoleWindow
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
SetLastError
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
FreeLibrary
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
DuplicateHandle
WaitForSingleObject
GetExitCodeThread
CreateThread
ExitThread
CreateTimerQueue
SetEvent
LoadLibraryW
oleaut32
CreateErrorInfo
SetErrorInfo
VarBstrFromBool
VarDateFromStr
SafeArrayUnaccessData
SafeArrayGetLBound
SysAllocStringLen
SysStringLen
SafeArrayCreate
SafeArrayGetUBound
user32
CharNextW
AppendMenuW
GetDC
AdjustWindowRect
ScreenToClient
IntersectRect
DrawIconEx
CreateIconIndirect
MapDialogRect
ModifyMenuW
secur32
DeleteSecurityContext
QuerySecurityPackageInfoW
GetUserNameExW
TranslateNameW
InitializeSecurityContextW
FreeCredentialsHandle
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lwsac8 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ