Static task
static1
Behavioral task
behavioral1
Sample
0458b28f530ca938df04f79f270f9f82_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0458b28f530ca938df04f79f270f9f82_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0458b28f530ca938df04f79f270f9f82_JaffaCakes118
-
Size
261KB
-
MD5
0458b28f530ca938df04f79f270f9f82
-
SHA1
38dea4c7a122c7dbcc209156e1e83bb4d973e453
-
SHA256
0ebf9939955b41ecde2c697a2ab5fd1a913babfef8d03d1507c6b5466ed2abfe
-
SHA512
be6d0176ec6955a375e6ce4f1121a749c1e1074733d597a0f614fc36867a38f45e0744a3176ac97d4d1a16816b881d7e80275cd7b12360ed149db265732425ec
-
SSDEEP
6144:tsMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:tDPSZrEtPU4Nmn08r2QnjR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0458b28f530ca938df04f79f270f9f82_JaffaCakes118
Files
-
0458b28f530ca938df04f79f270f9f82_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e1c4792f15b09efa9287ef89fc4944a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SystemTimeToFileTime
GetSystemTime
GetLastError
GetLocaleInfoW
GetVersion
InitializeCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentThreadId
TlsAlloc
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
IsBadWritePtr
FatalAppExitA
GetStartupInfoA
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
Sleep
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
BeginUpdateResourceW
GetProcAddress
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
SHCreateDirectoryExA
SHGetFolderPathA
msasn1
ASN1BEREncCheck
ASN1CEREncMultibyteString
ASN1BERDecBitString2
ASN1BEREncGeneralizedTime
ASN1DecRealloc
ASN1BERDecUTCTime
ASN1BEREncFlush
ASN1BEREncEndOfContents
ASN1BERDecDouble
ASN1BEREncChar32String
ASN1BERDecOctetString
ASN1BEREncOpenType
ASN1_CloseModule
ASN1ztchar32string_free
ASN1open_free
ASN1_Encode
ASN1_CloseDecoder
t2embed
TTIsEmbeddingEnabledForFacename
Sections
CODE Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sQvasT Size: 5KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ZY Size: 2KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sHJUwl Size: 4KB - Virtual size: 971KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 90KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WoXhXU Size: 512B - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LqTVGi Size: 1KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 129KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.FOAu Size: 4KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ