Static task
static1
Behavioral task
behavioral1
Sample
ae13f9b60fe711288abb86e2f3f72f82_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ae13f9b60fe711288abb86e2f3f72f82_JaffaCakes118
-
Size
2.1MB
-
MD5
ae13f9b60fe711288abb86e2f3f72f82
-
SHA1
4849484516ffed02058b8988849489631fe0e62a
-
SHA256
49a368fb7bc1054adcc105863a4d9d0374605328e9c2b3ee2be71623d52f96bd
-
SHA512
4f80d9160a5a932f17656170209a315441f89f69b2ba221f4bac04811180ae221818254fbc343c0f2bc06eecca1289305181944499eba70edea91a81c7a36316
-
SSDEEP
49152:ngNmKHbbgL81LJi96/BLzmeS1Hu8NYIwMM+w1eN4:gIKHbsW9I6/Vzi1HdXwMIQ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae13f9b60fe711288abb86e2f3f72f82_JaffaCakes118
Files
-
ae13f9b60fe711288abb86e2f3f72f82_JaffaCakes118.exe windows:5 windows x86 arch:x86
ffbf2d5edc190241e4006727db10cd10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetCurrentProcess
WaitForSingleObject
CreateThread
GetTickCount
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
IsProcessorFeaturePresent
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
FlushFileBuffers
SetStdHandle
WriteConsoleW
CloseHandle
CreateFileW
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ