Static task
static1
Behavioral task
behavioral1
Sample
01f2f3b37b7e5f138f1ed8214037baa3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01f2f3b37b7e5f138f1ed8214037baa3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01f2f3b37b7e5f138f1ed8214037baa3_JaffaCakes118
-
Size
43KB
-
MD5
01f2f3b37b7e5f138f1ed8214037baa3
-
SHA1
9832fe933f6da1f9b587ead45d804021c3151078
-
SHA256
49b5167087f0ef1565dd2a746e1fa09c2f7b951392c18ff8ae2230ee753a34d0
-
SHA512
01e526005a2c07032ac9f76d8a6d177193a3304a0c158e42c5338dfe0e2972390e892a13e21725a3c193aa37128599ec289f8029231c5043cb9cf7c965d75907
-
SSDEEP
768:ZpmVPXilgjLaogX7uZ/n605Yl5l8xTbxYvZV/hnhBLlBC9K25hTy:ZIFXngX7V05kn81b2vZLnDPC9HhG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01f2f3b37b7e5f138f1ed8214037baa3_JaffaCakes118
Files
-
01f2f3b37b7e5f138f1ed8214037baa3_JaffaCakes118.exe windows:5 windows x86 arch:x86
5067f45cf132b56e3b13659d632d06a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
CloseHandle
CreateEventW
WriteFile
lstrlenA
CopyFileW
SetEndOfFile
HeapAlloc
CreateThread
SetFileTime
MoveFileExW
EnterCriticalSection
GetSystemTimeAsFileTime
lstrcatW
CreateMutexW
HeapFree
CreateFileMappingW
SetFileAttributesW
GetDriveTypeW
SetEvent
GetUserDefaultUILanguage
GetCommandLineA
SetLastError
ReleaseMutex
GetSystemTime
GetModuleHandleA
OpenProcess
GetTempPathW
lstrcpynW
GetModuleFileNameA
user32
FindWindowExW
PeekMessageW
Sections
.zalmd Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hif Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nwdil Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ