Static task
static1
Behavioral task
behavioral1
Sample
f9b644bd270b02f4220e848477a83dc5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9b644bd270b02f4220e848477a83dc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9b644bd270b02f4220e848477a83dc5_JaffaCakes118
-
Size
27KB
-
MD5
f9b644bd270b02f4220e848477a83dc5
-
SHA1
03bd63ca0c0ca6139cbceb876a1423a6a2084ae0
-
SHA256
4f02a829852749b68bdb9d5e8fe95398a50b406eb4fc156f6d45c39a0db1b07b
-
SHA512
ed439adec5329d508305ead897544cb0c8dbdbe08bdd6558dacd6d396272b983f72d88d0fdda3d1fa6dec6061301870f34db9f21b8dc0b265c9f65373adaa3ef
-
SSDEEP
384:CrTcLkeMRjlD+1gALTAsNcExj/CI34cPMeRrzln/mFghdXTHJGHhyQQId1/VXbrk:CMvMRFAgmcEqI4ckeLHXTHJYdQId1tr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9b644bd270b02f4220e848477a83dc5_JaffaCakes118
Files
-
f9b644bd270b02f4220e848477a83dc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
9db9f3eac45cd653e57c0ee2cb50ebf2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetTickCount
ReadFile
GetProcessHeap
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
CloseHandle
GetSystemTimeAsFileTime
GetProcessHeap
LocalAlloc
HeapFree
LocalFree
DisableThreadLibraryCalls
InitializeCriticalSection
GetModuleHandleA
CreateEventW
GetModuleHandleW
SetLastError
CreateThread
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
GetCurrentProcessId
HeapDestroy
VirtualAlloc
GetCurrentProcessId
GetProcessHeap
FreeLibrary
GetVersionExA
DisableThreadLibraryCalls
InterlockedIncrement
VirtualProtect
LoadLibraryA
HeapFree
InterlockedDecrement
ReadFile
GetCurrentProcess
GetLastError
GetCurrentThreadId
InterlockedExchange
GetModuleFileNameA
InterlockedIncrement
CreateThread
VirtualProtect
GetLastError
MultiByteToWideChar
VirtualProtect
DisableThreadLibraryCalls
GetProcAddress
ReadFile
QueryPerformanceCounter
FreeLibrary
GetModuleHandleA
GetLastError
GetCurrentProcess
lstrcmpiW
LeaveCriticalSection
GetProcessHeap
gdi32
CreateRectRgn
Ellipse
SelectObject
SetTextColor
SetBrushOrgEx
GetWindowOrgEx
SetBkColor
CreateBitmapIndirect
GetPixel
GetCurrentObject
SetPixel
SetBkColor
BitBlt
GetPixel
GetBkColor
GetBrushOrgEx
CreateDIBSection
CreateDIBitmap
CreateSolidBrush
GetWindowExtEx
SelectObject
GetBrushOrgEx
SetBkColor
LineTo
CreateFontA
BitBlt
SetWindowOrgEx
SetWindowOrgEx
CreateSolidBrush
CreateFontIndirectA
Ellipse
CreateSolidBrush
GetWindowExtEx
SetWindowOrgEx
CreateBitmap
SetWindowExtEx
CreateFontA
SetWindowOrgEx
CreateDIBitmap
CreateBitmapIndirect
CreateBitmap
CreateDIBSection
SetWindowOrgEx
CreateCompatibleDC
SetTextColor
SetBrushOrgEx
RoundRect
CreateBitmap
MoveToEx
CreateDIBSection
Sections
.text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ