Static task
static1
Behavioral task
behavioral1
Sample
f9d8346daea8edd2e86a54af5293d37a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9d8346daea8edd2e86a54af5293d37a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f9d8346daea8edd2e86a54af5293d37a_JaffaCakes118
-
Size
288KB
-
MD5
f9d8346daea8edd2e86a54af5293d37a
-
SHA1
15840fa7c9a822838a616670bf6464444d5a8c2e
-
SHA256
cb33961561ccb2c13adb864216eef00a4f30e2a59098e67ff48a46d0ab2fc319
-
SHA512
a2d12db1b333da16c24e0bac03c12e5220aab8abd58f35d9427025854123f6b27e44eee8a087b76c2aaede9fa49c6203d380e6bee8d0f6693319aa2314587de1
-
SSDEEP
6144:paBm1BXQfUhl7fTFMcbtYJ/b4UOIOV7izuo59fmgji:QBuBgfUhl7fTFRpeb4x1+9uD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9d8346daea8edd2e86a54af5293d37a_JaffaCakes118
Files
-
f9d8346daea8edd2e86a54af5293d37a_JaffaCakes118.exe windows:4 windows x86 arch:x86
71d6b6d0292e6c92b49d44e89c66dd4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoIsOle1Class
CoDisconnectObject
CoGetPSClsid
CoFreeLibrary
CoGetObject
kernel32
GetFileType
lstrlenA
FlushFileBuffers
FindFirstFileA
GetLogicalDrives
FindResourceExW
HeapReAlloc
GetFullPathNameW
SetConsoleCtrlHandler
TlsSetValue
CreateFileW
TlsAlloc
GetModuleHandleA
VirtualAlloc
LockResource
GetProcessHeap
lstrlenW
CompareStringA
LoadResource
SetErrorMode
WideCharToMultiByte
GetFileSize
GetCurrentThreadId
FreeLibrary
SetFileTime
WriteConsoleA
TlsGetValue
FreeEnvironmentStringsA
GetACP
TlsFree
CloseHandle
LCMapStringW
HeapSize
SetFilePointer
UnhandledExceptionFilter
SetStdHandle
FreeEnvironmentStringsW
ReadFile
GetConsoleCP
SetLastError
SetEndOfFile
FindNextFileW
GetTimeZoneInformation
FlushConsoleInputBuffer
GetCommandLineW
FindFirstFileW
RtlUnwind
GetDateFormatA
WriteFile
GetCommandLineA
GetOEMCP
SizeofResource
BackupRead
SetFileAttributesA
SetEnvironmentVariableW
SetFileAttributesW
LocalFree
MoveFileExW
GetVolumeInformationW
IsDebuggerPresent
GetUserDefaultLCID
lstrcmpA
SetEnvironmentVariableA
MoveFileW
GetTimeFormatA
HeapFree
GetStdHandle
VirtualFree
CompareStringW
DeviceIoControl
HeapAlloc
GetModuleHandleW
DeleteFileW
GetConsoleMode
FindClose
ExpandEnvironmentStringsW
WriteConsoleW
RaiseException
OpenProcess
LeaveCriticalSection
OutputDebugStringW
EnumSystemLocalesA
LCMapStringA
IsValidLocale
GetSystemTimeAsFileTime
GetFullPathNameA
EnterCriticalSection
CreateFileA
SetHandleCount
IsValidCodePage
SetConsoleMode
FindNextFileA
GetDriveTypeW
LocalAlloc
DeleteCriticalSection
OpenEventW
HeapDestroy
SetUnhandledExceptionFilter
DeleteFileA
GetConsoleOutputCP
FindResourceW
GetFileInformationByHandle
CompareFileTime
VirtualAllocEx
user32
CharLowerBuffW
UnregisterClassA
iphlpapi
GetNetworkParams
advapi32
SetFileSecurityW
GetLengthSid
RegOpenKeyExA
InitializeSecurityDescriptor
GetFileSecurityW
RegQueryInfoKeyW
RegEnumKeyExW
SetSecurityDescriptorDacl
SetFileSecurityA
InitializeAcl
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExA
RegQueryValueExW
LookupAccountSidW
RegCloseKey
GetTokenInformation
GetSecurityDescriptorOwner
LookupPrivilegeValueW
AddAccessAllowedAce
RegOpenKeyExW
OpenThreadToken
kbdal
KbdLayerDescriptor
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ