Static task
static1
Behavioral task
behavioral1
Sample
0901ad2e62bd77a5a7bcf823d00c3950_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0901ad2e62bd77a5a7bcf823d00c3950_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0901ad2e62bd77a5a7bcf823d00c3950_JaffaCakes118
-
Size
13.6MB
-
MD5
0901ad2e62bd77a5a7bcf823d00c3950
-
SHA1
5774b58084266028ca060d3cfede4227f1436858
-
SHA256
17aabdec054b5a9968a906ff9060a0d02eacb6ad4554d592e42db785eabafa79
-
SHA512
5c1ed73accb0aa99a45f50d0ec3f1a23459e2dafb31932394706f990c64d7f9608f01ff8f990dd594e1f526f59822ad788da2b010a667ccbc438e53c63ee80c3
-
SSDEEP
24576:6BNzDipfYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYf:6BZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0901ad2e62bd77a5a7bcf823d00c3950_JaffaCakes118
Files
-
0901ad2e62bd77a5a7bcf823d00c3950_JaffaCakes118.exe windows:5 windows x86 arch:x86
efd3aae4b3b3f35ca741fe1c310d4968
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
SetPriorityClass
SetThreadContext
SetLocalTime
LoadResource
ReadConsoleA
SetDefaultCommConfigW
SleepEx
CallNamedPipeW
GetProcessPriorityBoost
GetModuleHandleW
GetTickCount
WriteFile
GlobalAlloc
SizeofResource
SetSystemTimeAdjustment
TerminateProcess
lstrlenW
SetVolumeLabelA
GetPrivateProfileIntW
FreeLibraryAndExitThread
SearchPathA
LoadLibraryA
CreateSemaphoreW
LocalAlloc
PostQueuedCompletionStatus
AddAtomA
GetPrivateProfileStructA
_lread
EnumResourceNamesA
BuildCommDCBA
VirtualProtect
CloseHandle
lstrcpyW
GetSystemDefaultLangID
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetCurrentProcessId
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetFileType
CreateFileA
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
GetLocaleInfoW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
gdi32
GetCharWidthW
winhttp
WinHttpCloseHandle
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13.4MB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ