Static task
static1
Behavioral task
behavioral1
Sample
12ad3c6590a7f117ce2375298ca7016b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12ad3c6590a7f117ce2375298ca7016b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12ad3c6590a7f117ce2375298ca7016b_JaffaCakes118
-
Size
414KB
-
MD5
12ad3c6590a7f117ce2375298ca7016b
-
SHA1
affe9d7b6edb73f33dab5dce04df646d17a52b66
-
SHA256
3d4e2765a39af6349efbdce637521f446c1573055f734af5916932523e30889b
-
SHA512
4af1f04dbd3574f6a030ad90b4650c82c07af9838c1dfc5b210911338fe27ad2c0c3a43d956c4d4b42796943cc839710c6d7f5b69ee85678d61ba2667af8b99d
-
SSDEEP
6144:K3/5Q9EcBzEtaR/gVexSz9VxLY7iAVLTBQJle7:KP5Q9EcsOgVWs9nLYWAVZQS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12ad3c6590a7f117ce2375298ca7016b_JaffaCakes118
Files
-
12ad3c6590a7f117ce2375298ca7016b_JaffaCakes118.exe windows:5 windows x86 arch:x86
2a5f24bf6c892ac9436b3bc083603524
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConvertDefaultLocale
GetPriorityClass
FindFirstChangeNotificationA
PeekConsoleInputW
FindNextChangeNotification
SetCriticalSectionSpinCount
FreeEnvironmentStringsW
GetCommState
FlushViewOfFile
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapFree
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
LCMapStringW
MultiByteToWideChar
RtlUnwind
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
SetFilePointer
FlushFileBuffers
HeapAlloc
ReadFile
CreateFileA
HeapReAlloc
IsProcessorFeaturePresent
LoadLibraryW
CreateFileW
SetEndOfFile
GetProcessHeap
HeapSize
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ