Static task
static1
Behavioral task
behavioral1
Sample
156bff89cd383554b669871cd9469461_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
156bff89cd383554b669871cd9469461_JaffaCakes118
-
Size
846KB
-
MD5
156bff89cd383554b669871cd9469461
-
SHA1
04e14d2c9ed72728e362447be2e089618efec7b3
-
SHA256
24630f32f667b1b854c2745839a2d1d7f97e97b4a4fe0517f6e711b10fe5d9a4
-
SHA512
ee46d974df1fc0df1be8aa4faf52d110c328e2b8fd882ee16f8660f32b83bd9a92df4a27259b5c46ba09a59a97e03e3aaff2c5f9d6d67ba3b4274b93b86dc79f
-
SSDEEP
12288:/uHZgty5jXxsHjWW2ftLOAVBe/n4B0/dVwXVZxMxWxsMhIIXZVrc0LBqthW2nX:/uaty5qHjWVftfvc42QxqMBVrc0LuxX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 156bff89cd383554b669871cd9469461_JaffaCakes118
Files
-
156bff89cd383554b669871cd9469461_JaffaCakes118.exe windows:5 windows x86 arch:x86
ca2ea7d3748d1cb5c64f16a3dc6d8ce1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
SetThreadContext
LoadResource
GetCurrentProcess
GetCommandLineA
SizeofResource
GetLastError
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
ResumeThread
SetEndOfFile
ReadFile
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
MultiByteToWideChar
GetModuleHandleW
Sleep
ExitProcess
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
GetFullPathNameA
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetProcessHeap
shell32
ShellExecuteA
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 754KB - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ