Static task
static1
Behavioral task
behavioral1
Sample
078a13eb36a8fc75751dfb8bea879cee_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
078a13eb36a8fc75751dfb8bea879cee_JaffaCakes118
-
Size
222KB
-
MD5
078a13eb36a8fc75751dfb8bea879cee
-
SHA1
210126b966350337f1882f471f89676898004e5c
-
SHA256
c7468d0b6c8893f690887045afc318fa2f4bdce50126be5115b811dff1550ce4
-
SHA512
159cfaec1a8c1b4d4494fbe3ac47dcf040e908baa82d5c68432ef985138087a0b14fb3094aac5a157fc856dfffcf64404a96480a964cbf2b99c282d637555ab1
-
SSDEEP
6144:Ux6Yc623si2hWYI5MTpkKkFqOoGh70iX8jfax:UxBc623si2UYIOpkjgiX8bM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078a13eb36a8fc75751dfb8bea879cee_JaffaCakes118
Files
-
078a13eb36a8fc75751dfb8bea879cee_JaffaCakes118.exe windows:5 windows x86 arch:x86
75ff015bb63ce5d029239c6ca846cdd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
lstrlenA
GetCurrentProcess
OutputDebugStringW
GetCommandLineA
Sleep
GetModuleFileNameW
lstrcatA
lstrlenW
GetLastError
lstrcmpiA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
OutputDebugStringA
lstrcpyA
VirtualQuery
FlushFileBuffers
CloseHandle
CreateFileW
SetStdHandle
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
DecodePointer
GetModuleHandleW
ExitProcess
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapValidate
IsBadReadPtr
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
WriteFile
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
FreeLibrary
LoadLibraryW
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
RtlUnwind
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
WriteConsoleW
CompareStringW
MultiByteToWideChar
SetEnvironmentVariableA
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
SetFilePointer
GetProcessHeap
user32
MessageBoxA
shell32
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ