Static task
static1
Behavioral task
behavioral1
Sample
0e0f139a64f010542059686e363602cd_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e0f139a64f010542059686e363602cd_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0e0f139a64f010542059686e363602cd_JaffaCakes118
-
Size
881KB
-
MD5
0e0f139a64f010542059686e363602cd
-
SHA1
4bcb7da256c07ce02453f0ef463a77a8f3511fd8
-
SHA256
6b80732c11095f5892aa04e1fab7e95bf0e1e4b0aa4e526ffdd5d46dd845866d
-
SHA512
704b28ea6659d78ef19b6284116886fe8063283240bbdd0519542c4bbcd66482db5b077844af430c98ff7509abc57e0bfeb24fad571f664dda5ae5ac78d68f61
-
SSDEEP
24576:3/pwmLVuwoA+7CwvzU6JPDeT1aNn0IuCw:5VuA6LQsn0d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0f139a64f010542059686e363602cd_JaffaCakes118
Files
-
0e0f139a64f010542059686e363602cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
617666c6cb31451f6c6dcbaf36ecde05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryExA
GetSystemTimeAsFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
VirtualQuery
InterlockedExchange
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualProtect
GetSystemInfo
GetTimeZoneInformation
SetFilePointer
GetLocaleInfoW
SetStdHandle
CloseHandle
user32
MessageBoxW
ole32
CoTaskMemAlloc
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE