Static task
static1
Behavioral task
behavioral1
Sample
1174d2bae63e0d7855b9d6891628c3ef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1174d2bae63e0d7855b9d6891628c3ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1174d2bae63e0d7855b9d6891628c3ef_JaffaCakes118
-
Size
294KB
-
MD5
1174d2bae63e0d7855b9d6891628c3ef
-
SHA1
23fd91bedbcd720ba936410f419261944cd1172c
-
SHA256
aea9b506745a7822dac3b9451dd01bcceb0f21017ef66c4fdb571b2a6327b260
-
SHA512
5a2e7b562e642f567513b164faa86d1009da4e4726eed6d4640d7c9aed60d7bab095af098ebe67b7c338679c244b6bbcda3c3684ef8ac1fbd15c7c336613d177
-
SSDEEP
6144:cHIoxpyC4knDNYLn05ntE2ZizLV/QSv377PDkmc:cHIUnJYL0fE2cuankN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1174d2bae63e0d7855b9d6891628c3ef_JaffaCakes118
Files
-
1174d2bae63e0d7855b9d6891628c3ef_JaffaCakes118.exe windows:5 windows x86 arch:x86
a56f005f373270df943bb78af2855d4e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
GetModuleHandleW
GetLastError
DecodePointer
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
GetFileType
CreateFileA
SetHandleCount
GetStdHandle
LoadLibraryW
WriteFile
GetModuleFileNameW
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
HeapAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
HeapSize
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
FlushFileBuffers
WriteConsoleW
CreateFileW
icm32
ord15
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ