Static task
static1
Behavioral task
behavioral1
Sample
0f6f62732f7d8f04680f471adda69319_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f6f62732f7d8f04680f471adda69319_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0f6f62732f7d8f04680f471adda69319_JaffaCakes118
-
Size
1.2MB
-
MD5
0f6f62732f7d8f04680f471adda69319
-
SHA1
3aeb0902922b527d2a9de2720f174ee2c7313b61
-
SHA256
912475331ee9ccb0eb5ed1315c8e80b8dc650294b897f6df995a565d4350d681
-
SHA512
5372dbad6e41a51518ce3758ad5959464a9244297b10770701521afc1378883e7affc77a2e76eb157e68c51d3a82584b2eeb86f3d099ca42d966c7cdfbb1958b
-
SSDEEP
24576:sFUTiVJMOqy7Bnz5q97JXiXZVsFsmbY39y1HVHtl3TVF+Pjxbp:WVJMY9nz5qJNss6m4y5Zt1TV6V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f6f62732f7d8f04680f471adda69319_JaffaCakes118
Files
-
0f6f62732f7d8f04680f471adda69319_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2c38686404999f7f4626625fdebef43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetFileAttributesA
GetFileAttributesA
lstrlenA
lstrcpyA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
DeleteFileA
CreateFileA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
SetCurrentDirectoryA
GetCurrentDirectoryA
LoadResource
SetFilePointer
FindResourceA
CreateDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalSize
GlobalFree
GlobalHandle
WriteFile
_lclose
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempPathA
MulDiv
GetWindowsDirectoryA
lstrcatA
CloseHandle
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
HeapFree
GetProcessHeap
user32
EndDialog
CreateDialogIndirectParamA
DialogBoxIndirectParamA
GetDlgItemTextA
GetWindowTextA
wsprintfA
MessageBoxA
SetWindowTextA
MoveWindow
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetPropA
SetDlgItemTextA
IsWindow
DestroyWindow
SetPropA
GetWindowRect
GetSystemMetrics
RemovePropA
SendDlgItemMessageA
shell32
DragQueryFileA
DragFinish
ShellExecuteA
comctl32
ord17
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ