Static task
static1
Behavioral task
behavioral1
Sample
0ea008f7618af775c5c15b9626e7014f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ea008f7618af775c5c15b9626e7014f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0ea008f7618af775c5c15b9626e7014f_JaffaCakes118
-
Size
356KB
-
MD5
0ea008f7618af775c5c15b9626e7014f
-
SHA1
7b0ee83a97513c581063b2f3745b338bc9227ca2
-
SHA256
9ee4130546f18f6a242c4945deb13e4a6f01248d2e265b4bcac5995e8d6ed1a6
-
SHA512
71584d12a1c7a9469f5096703302e6622890aba81f698c4aed31d0b2c475557ded48a47e7557fd8e24a3a231ce25bf0591515fd155ffb3851e8f935e677c38c8
-
SSDEEP
6144:Sae/c0RVIqxFu4s2a9XHCd9hxJamsAT4k+wCGbfQfojzMBR5Z:W/cMVDxFu43cHYf1TPCAxjzMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea008f7618af775c5c15b9626e7014f_JaffaCakes118
Files
-
0ea008f7618af775c5c15b9626e7014f_JaffaCakes118.exe windows:4 windows x86 arch:x86
af1f0d2de1aa75deb87be3cccb118fb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
OpenMutexA
CloseHandle
MapViewOfFileEx
DosDateTimeToFileTime
CreateFileMappingA
SetLocaleInfoA
OpenEventA
GetFileSize
GetFileType
GetModuleHandleA
GetModuleHandleW
CopyFileA
CompareStringW
WaitForSingleObject
FindClose
GetCurrentThreadId
FreeConsole
GetCommandLineA
GetCurrentProcessId
GetFileAttributesW
LoadLibraryA
SetThreadLocale
DuplicateHandle
OpenMutexW
CreateFileA
OpenSemaphoreA
SetStdHandle
SetFilePointer
FlushFileBuffers
GetProcAddress
GetOEMCP
GetCPInfo
GetACP
GetFileAttributesA
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
user32
GetClipboardData
GetWindowTextA
GetWindowTextLengthW
GetMenu
FindWindowExW
GetWindowTextW
CreatePopupMenu
CreateMenu
FindWindowA
GetWindowTextLengthA
GetClientRect
CreateWindowExW
CreateWindowExA
gdi32
CreateSolidBrush
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ