Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_13560ff463947e42949ee5277a1de2b7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_13560ff463947e42949ee5277a1de2b7.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_13560ff463947e42949ee5277a1de2b7
-
Size
275KB
-
MD5
13560ff463947e42949ee5277a1de2b7
-
SHA1
5606900ea44272dee62f8c0e5694e4e4adb169f9
-
SHA256
5708736ce8a40f56d391362c9d657c07bd9afc80d88ee3284009a1cbe962f6e2
-
SHA512
23c1e1cbf7bd3f2f4c8eb681fe33f325a4bb73edb9a942f84d937d685882f6ac71af6a1d321ba2eafcea0210f467e2bad85ae7225754ce168a2253a2791be11c
-
SSDEEP
6144:vdjv/1Aw04lXFwi/QxJTqGRT2aMUei/3PA5kH/:vdjv/1Aw04tQ3TX1jfA5kH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_13560ff463947e42949ee5277a1de2b7
Files
-
JaffaCakes118_13560ff463947e42949ee5277a1de2b7.exe windows:4 windows x86 arch:x86
aeae0f4ac50e850d2ac7357d8abda9c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrlenA
LocalFree
lstrcmpiA
FreeLibrary
TlsAlloc
EnterCriticalSection
TlsGetValue
GetStdHandle
CreateFileMappingA
IsDebuggerPresent
MapViewOfFile
SetFilePointer
GetTimeZoneInformation
ReleaseMutex
DeleteFileA
DeleteCriticalSection
CompareStringA
GetConsoleMode
GetCurrentThreadId
SetStdHandle
LCMapStringA
CreateEventA
UnhandledExceptionFilter
RtlUnwind
FlushFileBuffers
GetSystemTimeAsFileTime
WriteConsoleW
WaitForSingleObject
SetEnvironmentVariableA
GetProcessHeap
GetFileSize
CreateFileA
UnmapViewOfFile
HeapDestroy
FreeEnvironmentStringsW
CopyFileA
CreateDirectoryW
CloseHandle
GetFileType
SetLastError
LocalAlloc
SystemTimeToFileTime
FreeEnvironmentStringsA
HeapSize
OpenMutexA
VirtualFree
LCMapStringW
SetCurrentDirectoryA
SetUnhandledExceptionFilter
SleepEx
TerminateThread
WriteConsoleA
ReadFile
SetEndOfFile
LoadLibraryExA
GetOEMCP
WriteFile
IsValidCodePage
GetACP
FileTimeToSystemTime
SetHandleCount
CreateMutexA
FormatMessageA
TlsFree
HeapAlloc
GetConsoleOutputCP
VirtualAlloc
LeaveCriticalSection
ResetEvent
CompareStringW
GetCommandLineA
HeapFree
CreateThread
WideCharToMultiByte
TlsSetValue
HeapReAlloc
GetConsoleCP
GetComputerNameA
RaiseException
OutputDebugStringA
GetStartupInfoA
user32
wsprintfA
rpcrt4
NdrClientCall2
RpcServerListen
RpcServerUnregisterIf
RpcStringBindingComposeA
RpcServerRegisterIf
RpcBindingFree
UuidToStringA
RpcServerUseProtseqEpA
RpcBindingFromStringBindingA
UuidCreate
RpcMgmtStopServerListening
NdrServerCall2
RpcStringFreeA
RpcMgmtIsServerListening
UuidFromStringA
RpcServerRegisterAuthInfoA
advapi32
GetSidSubAuthorityCount
IsValidSecurityDescriptor
OpenProcessToken
RegCloseKey
SetFileSecurityW
CryptCreateHash
GetSidIdentifierAuthority
SetSecurityDescriptorDacl
AllocateAndInitializeSid
IsValidSid
RegQueryValueExA
CryptDestroyHash
InitializeAcl
CryptAcquireContextA
CryptGetHashParam
GetSidSubAuthority
CryptHashData
EqualSid
GetTokenInformation
AddAccessAllowedAce
FreeSid
InitializeSecurityDescriptor
RegOpenKeyExA
CryptReleaseContext
esent
JetCreateTable
JetOpenTempTable3
JetResetSessionContext
JetGetLS
JetAttachDatabase2
JetMakeKey
JetSnapshotStart
JetGotoSecondaryIndexBookmark
JetGetBookmark
JetDetachDatabase2
JetSetColumn
JetRollback
JetConvertDDL
wavemsp
DllRegisterServer
DllUnregisterServer
DllGetClassObject
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 241KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ