Static task
static1
Behavioral task
behavioral1
Sample
05966c2afb9f036910091036601a87a1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05966c2afb9f036910091036601a87a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05966c2afb9f036910091036601a87a1_JaffaCakes118
-
Size
466KB
-
MD5
05966c2afb9f036910091036601a87a1
-
SHA1
88338d96d4b088b7b15199f9579abe3455951cca
-
SHA256
8583702e29c27675ad5ecf57ae1a9099dcf9cdb28122b9d61eb89d3ecd768e46
-
SHA512
3f12819a62392a1ee6fbc544a02524d8cf8c0952aa7b191453a80fdca3e629727ea6ebc6ae66d023b62d0a4dfa18db6aee6f888b42985b0c070696cc9eccccb4
-
SSDEEP
12288:YuQ5XwyAqWYgeWYg955/155/rmEu5MLzbc5GFiBw9oh:S5XtAWEu5MwGFL9m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05966c2afb9f036910091036601a87a1_JaffaCakes118
Files
-
05966c2afb9f036910091036601a87a1_JaffaCakes118.exe windows:6 windows x64 arch:x64
03513895ffd25f71be4b6c265942eea6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
HeapFree
SetConsoleTitleA
InitializeCriticalSectionEx
WaitForSingleObject
CreateFileW
HeapSize
Sleep
GetLastError
LoadLibraryA
HeapReAlloc
CloseHandle
RaiseException
HeapAlloc
DecodePointer
Beep
GetProcAddress
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
GetConsoleWindow
IsDebuggerPresent
GetExitCodeProcess
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
SetEndOfFile
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
EncodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
RtlUnwindEx
InterlockedPushEntrySList
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
CreateProcessW
GetFileAttributesExW
CompareStringW
LCMapStringW
RtlUnwind
user32
MoveWindow
GetAsyncKeyState
FindWindowA
shell32
ShellExecuteExA
rpcrt4
RpcStringFreeA
UuidToStringA
UuidCreate
wininet
InternetCheckConnectionW
urlmon
URLDownloadToFileA
Sections
.text Size: 317KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ