Static task
static1
Behavioral task
behavioral1
Sample
29690ce297c3b4d22fb0e97ebead52cd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
29690ce297c3b4d22fb0e97ebead52cd_JaffaCakes118
-
Size
235KB
-
MD5
29690ce297c3b4d22fb0e97ebead52cd
-
SHA1
10dfd5a23826e23a4c3cf026b976c5859557eae2
-
SHA256
9dd276bde63af77f6e81fa196e1b3d1ed6d984bf89316a8ee52d87ae58b94b08
-
SHA512
20bdce02c82f149e4726b1fc44a2f762dda59829152910b4402cbfb756dc620154571c0c56c79d34e0272997317f776ebfb9be5d1f42d5765792c8bb4c4db6ce
-
SSDEEP
6144:z7ECm4hARGqrv4jrngRrbrBc5RgaLi7/m:z7ECm4qRGAAjrngxbrBQgaWTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29690ce297c3b4d22fb0e97ebead52cd_JaffaCakes118
Files
-
29690ce297c3b4d22fb0e97ebead52cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
609c72ec878b3380a98dc98cc60c7a39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
InterlockedDecrement
FreeLibrary
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetTimeZoneInformation
GetACP
HeapSize
TerminateProcess
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
InterlockedIncrement
GetFileTime
GetFileSize
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
WriteFile
HeapAlloc
HeapFree
GetCurrentThreadId
CreateMutexA
CreateDirectoryA
GetCommandLineA
ReleaseMutex
SetUnhandledExceptionFilter
GetVersionExA
GetWindowsDirectoryA
WinExec
GetModuleHandleA
GetModuleFileNameA
MultiByteToWideChar
GetFileAttributesA
CreateFileA
SetFilePointer
ReadFile
lstrcatA
GetLastError
DeleteFileA
SetLastError
lstrlenA
lstrcpyA
Sleep
ExitProcess
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
lstrcmpiA
CloseHandle
shell32
SHGetFolderPathA
comctl32
ord17
gdi32
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
comdlg32
GetFileTitleA
Sections
.text Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ