Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_51adb9247012627a5e206ab777d77bee8e8f8b5e364d3e2df6df53c2f6da00ea.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_51adb9247012627a5e206ab777d77bee8e8f8b5e364d3e2df6df53c2f6da00ea.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_51adb9247012627a5e206ab777d77bee8e8f8b5e364d3e2df6df53c2f6da00ea
-
Size
393KB
-
MD5
3c732dc10c69e957a4d38165c82b71ed
-
SHA1
71a32204d4c3e6783d617c9a3a8ec62f9cb68836
-
SHA256
51adb9247012627a5e206ab777d77bee8e8f8b5e364d3e2df6df53c2f6da00ea
-
SHA512
5c43393f6e0b1fde37459e83c6b6ef6361f9d86ba4859765ec989b9e499e01c4d6a053bdb989e4449756c7d1bcd63c01e17599f446ab986a7d5a60c79a271cd3
-
SSDEEP
6144:2g20NbsBNmedasOtnitCJ0lDvEwR9eMxrHuz2XbvR9iH4OPTv3:2g2sb6m0KlitCa1vbrROqDRKVPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_51adb9247012627a5e206ab777d77bee8e8f8b5e364d3e2df6df53c2f6da00ea
Files
-
JaffaCakes118_51adb9247012627a5e206ab777d77bee8e8f8b5e364d3e2df6df53c2f6da00ea.exe windows:5 windows x86 arch:x86
35984b3ffd3b3ad565fdc9c5bec98829
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
GetNumberOfConsoleMouseButtons
InitializeSListHead
CreateDirectoryW
GetTimeFormatA
LockFile
ConnectNamedPipe
GetTickCount
GetSystemPowerStatus
SetSystemTimeAdjustment
HeapDestroy
GetFileAttributesA
GetAtomNameW
IsDBCSLeadByte
ReadFile
GetModuleFileNameW
GetTimeZoneInformation
GetACP
RaiseException
CreateJobObjectA
LCMapStringA
GetConsoleOutputCP
GetHandleInformation
GetCurrentDirectoryW
GetProcAddress
SystemTimeToTzSpecificLocalTime
EnumDateFormatsExA
LocalLock
HeapUnlock
EnterCriticalSection
SetFileAttributesA
PrepareTape
GetProcessVersion
GetLocalTime
LocalAlloc
AddVectoredExceptionHandler
SetConsoleOutputCP
VirtualLock
SetCommMask
GetTapeParameters
GetModuleHandleA
QueryMemoryResourceNotification
FreeEnvironmentStringsW
SetCalendarInfoA
FindAtomW
CompareStringW
CompareStringA
GetProcessHeap
GetLocaleInfoW
FlushFileBuffers
IsValidLocale
FreeLibrary
GetConsoleAliasExesLengthA
SetEndOfFile
FindVolumeMountPointClose
GetConsoleAliasesLengthW
GetLastError
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
Sleep
HeapSize
ExitProcess
DeleteCriticalSection
FatalAppExitA
HeapCreate
VirtualFree
VirtualAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateFileA
SetStdHandle
WriteConsoleA
WriteConsoleW
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetDesktopWindow
GetProcessDefaultLayout
GetClassLongA
GetUserObjectInformationA
advapi32
RegCreateKeyA
GetPrivateObjectSecurity
GetSidSubAuthorityCount
ImpersonateAnonymousToken
Sections
.text Size: 321KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ