Static task
static1
Behavioral task
behavioral1
Sample
06978cf8e07cadd3fbea1a82f1723253_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
06978cf8e07cadd3fbea1a82f1723253_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06978cf8e07cadd3fbea1a82f1723253_JaffaCakes118
-
Size
142KB
-
MD5
06978cf8e07cadd3fbea1a82f1723253
-
SHA1
dc91e5a847ec8a465148e9eeecf88a34c3c95dc2
-
SHA256
db321bfff96bea386bf173fcfa68c8425e40148d57cb61940d6914126ffde128
-
SHA512
c92aae76e6c710f068fa655c9449ddaeba8f52cc5f232e7f48316db66eda7474320a187010c50315ed67190cde887a97fe4eb541a702a212068b1959e6bfc0ee
-
SSDEEP
3072:8X3fIySnMaiS4t0xkoMU2XmX3pTD8RWNxZR0Ylm5Osqch0c:A3DSnMaiS48xMU9+ANxcYlm5970
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06978cf8e07cadd3fbea1a82f1723253_JaffaCakes118
Files
-
06978cf8e07cadd3fbea1a82f1723253_JaffaCakes118.exe windows:4 windows x86 arch:x86
2355be9be7868c0ca68571ee93302a53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDCEx
gdi32
SetROP2
kernel32
ReleaseMutex
GetSystemTimeAsFileTime
CreateFileA
ReleaseMutex
VirtualProtectEx
GetSystemTimeAsFileTime
ReadProcessMemory
SleepEx
GetStartupInfoW
LoadLibraryExW
CreateProcessA
LoadLibraryExA
GetStartupInfoW
CreateProcessW
LoadLibraryExA
GetSystemTime
LoadLibraryA
CreateFileA
GetSystemTime
CreateProcessW
LoadLibraryA
GetSystemTimeAsFileTime
ReleaseMutex
DeviceIoControl
VirtualProtect
DeviceIoControl
TerminateProcess
CreateProcessW
Sleep
WriteProcessMemory
ReadProcessMemory
GetProcAddress
GetCurrentDirectoryA
GetLastError
LoadLibraryA
GetCommandLineA
SetHandleInformation
GetCommandLineA
TlsGetValue
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentThread
GetCurrentThreadId
VirtualProtect
SleepEx
ReleaseMutex
TerminateProcess
WaitForSingleObjectEx
LoadLibraryExW
WriteProcessMemory
ReadProcessMemory
WriteProcessMemory
CreateFileA
LoadLibraryExW
VirtualProtect
WriteProcessMemory
GetStartupInfoW
GetStartupInfoW
GetStartupInfoA
LoadLibraryExA
CreateProcessW
GetStartupInfoW
VirtualProtect
TerminateProcess
LoadLibraryA
VirtualProtectEx
WaitForSingleObjectEx
LoadLibraryExW
LoadLibraryA
ReadProcessMemory
CreateFileA
LoadLibraryA
VirtualProtect
ReadProcessMemory
WaitForSingleObject
GetSystemTimeAsFileTime
Sleep
VirtualProtectEx
DeviceIoControl
ReadFile
WaitForSingleObjectEx
WaitForSingleObject
SleepEx
GetStartupInfoW
GetSystemTimeAsFileTime
GetSystemTimeAsFileTime
DeviceIoControl
CreateProcessA
GetSystemTime
TerminateProcess
WriteProcessMemory
WaitForSingleObject
WaitForSingleObject
LoadLibraryExA
GetSystemTimeAsFileTime
ReadFile
WaitForSingleObjectEx
DeviceIoControl
ReadProcessMemory
TerminateProcess
WaitForSingleObjectEx
GetStartupInfoW
GetStartupInfoW
GetSystemTime
CreateProcessA
WriteProcessMemory
ReleaseMutex
WaitForSingleObjectEx
GetSystemTime
SleepEx
ReleaseMutex
GetStartupInfoA
CreateProcessW
LoadLibraryA
Sleep
GetSystemTime
VirtualProtectEx
LoadLibraryExW
LoadLibraryA
VirtualProtectEx
WaitForSingleObject
GetSystemTime
TerminateProcess
GetSystemTimeAsFileTime
WriteProcessMemory
GetStartupInfoW
ReleaseMutex
WriteProcessMemory
TerminateProcess
DeviceIoControl
GetSystemTimeAsFileTime
SleepEx
ReadFile
VirtualProtect
WaitForSingleObjectEx
CreateProcessW
GetStartupInfoA
ReadFile
SleepEx
CreateProcessA
ReleaseMutex
Sleep
GetSystemTimeAsFileTime
LoadLibraryA
VirtualProtect
GetSystemTimeAsFileTime
LoadLibraryExW
WriteProcessMemory
GetStartupInfoA
Sleep
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
SleepEx
VirtualProtect
SleepEx
WriteProcessMemory
CreateFileA
GetSystemTime
ReleaseMutex
GetStartupInfoW
DeviceIoControl
ReleaseMutex
VirtualProtectEx
WaitForSingleObjectEx
GetStartupInfoA
Sleep
WaitForSingleObjectEx
CreateProcessA
VirtualProtect
LoadLibraryA
WriteProcessMemory
WaitForSingleObjectEx
VirtualProtectEx
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 116KB - Virtual size: 120KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ