Static task
static1
Behavioral task
behavioral1
Sample
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118
-
Size
155KB
-
MD5
0ef25fecaf3eab11573d5dc63a5ccaae
-
SHA1
5f957fa797af8560c755bb2b39e6ea723abd9a72
-
SHA256
a723da000f365596f410b0b3ee5db364f47d974ec048a2dcb30bab0640e329f7
-
SHA512
6de7c0c423ffb4c65d708b36e34207e45135fb5e27c6ce772990dafecd88361ef0e580e8a61f2c504e65411e521d019d3e8c6f2820318c1482382c68ae750a77
-
SSDEEP
3072:BBL4XlpcDYZsGbvGbXvtwQncpKju+01feaytLhZb6WrJPn:BKluhGbC1wQdW5ab/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118
Files
-
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118.exe windows:5 windows x86 arch:x86
b5f4c6405e1847f10b32514e8593e21c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LCMapStringW
IsProcessorFeaturePresent
GetStringTypeW
IsValidCodePage
LoadLibraryA
GlobalFree
GetProcAddress
GlobalUnlock
GetLastError
MultiByteToWideChar
GlobalAlloc
GetTickCount
GlobalLock
GetCurrentProcess
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CreateFileA
CreateFileW
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
DeleteCriticalSection
LoadLibraryW
SetHandleCount
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
SetFilePointer
RtlUnwind
SetEndOfFile
GetProcessHeap
ReadFile
GetCPInfo
GetACP
GetOEMCP
user32
GetPropA
LoadMenuA
DrawIcon
EnumWindows
MessageBoxA
DialogBoxIndirectParamA
FindWindowA
gdi32
SelectObject
GetStockObject
TextOutA
SetPixel
advapi32
SetEntriesInAclA
comctl32
ord17
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ