Static task
static1
Behavioral task
behavioral1
Sample
08c58e6e288ddf294390c1bc2bcf08bd_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08c58e6e288ddf294390c1bc2bcf08bd_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
08c58e6e288ddf294390c1bc2bcf08bd_JaffaCakes118
-
Size
2.8MB
-
MD5
08c58e6e288ddf294390c1bc2bcf08bd
-
SHA1
4c6b65793e251742f76006f026e92d5c5dd18660
-
SHA256
c87dcb6d62fbb5dc99899a8155ff3097515db25c49e697c9ae563814c46165e3
-
SHA512
899199bf75666c775dcf2844c820673fa7b0c0dc0d1ffa9eb4a24d5410001062f840802d5d295689a0b35187adfe6bdc8ac2b9d14093441e3242077b4babad6f
-
SSDEEP
24576:L4FTd5W4eAwKFZYbLVS5uCdXjJJJnf1WjiZ3K5qIcMi/d:L2heAww2HCbfIjiZ6A/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c58e6e288ddf294390c1bc2bcf08bd_JaffaCakes118
Files
-
08c58e6e288ddf294390c1bc2bcf08bd_JaffaCakes118.exe windows:5 windows x86 arch:x86
caf092eafd91f201ce1ac58d4a93d051
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommBreak
SetCommConfig
TransmitCommChar
DosDateTimeToFileTime
TransactNamedPipe
lstrlenW
ExpandEnvironmentStringsW
GetSystemDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
GetACP
WideCharToMultiByte
LCMapStringW
GetStringTypeW
GetConsoleWindow
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetFileValidData
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
IsValidCodePage
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapFree
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
SetEndOfFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
VirtualAlloc
advapi32
RegSetValueExW
RegDeleteKeyW
RegCloseKey
OpenSCManagerW
user32
DestroyWindow
IsZoomed
IsWindowEnabled
CopyAcceleratorTableW
HiliteMenuItem
GetSubMenu
EndMenu
UpdateWindow
GetWindowRgnBox
MessageBeep
SetCursorPos
MapWindowPoints
IsDialogMessageW
winscard
SCardFreeMemory
SCardListReadersW
winspool.drv
CloseSpoolFileHandle
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 745KB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ne752 Size: 602KB - Virtual size: 602KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dgk84 Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7r9ce Size: 414KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ