Static task
static1
Behavioral task
behavioral1
Sample
0ac5f4ae968555ef425d070c2e500b67_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ac5f4ae968555ef425d070c2e500b67_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ac5f4ae968555ef425d070c2e500b67_JaffaCakes118
-
Size
176KB
-
MD5
0ac5f4ae968555ef425d070c2e500b67
-
SHA1
23710aff9da8bb518957c1be1095c5862f835748
-
SHA256
5852abbacc1aab2e658f3b1c94b44538d63f45df7720883d1dcef31bff4fae88
-
SHA512
507b48186a1fd11d363e6bad0a947857058e969690b2acf93be77446b03f6ab635808f5040004cd0bea7606bef97bc2ef136018edbc2ad316860be419b6925be
-
SSDEEP
3072:qqrtgr2NjPRekzfmKcNIdi+aeoMjM5zZE+/yU/IG:qqJjbpzDNAzX/9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ac5f4ae968555ef425d070c2e500b67_JaffaCakes118
Files
-
0ac5f4ae968555ef425d070c2e500b67_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e430ffa4ceab4c3a38b68ec6fe7172d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
gdi32
DeleteObject
GetTextExtentPointA
GetTextMetricsA
SelectObject
GetDeviceCaps
CreateFontIndirectA
ole32
CoGetMalloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
kernel32
GetCPInfo
InterlockedExchange
InitializeCriticalSection
GetCPInfoExW
GetStdHandle
RaiseException
MultiByteToWideChar
GetACP
WriteFile
DeleteCriticalSection
GetVersionExA
GetEnvironmentStrings
GetThreadLocale
LeaveCriticalSection
UnhandledExceptionFilter
SetHandleCount
GetOEMCP
TlsGetValue
GetFileType
EnumResourceTypesA
WideCharToMultiByte
GetLocaleInfoA
TlsSetValue
GetLastError
FreeEnvironmentStringsW
FreeEnvironmentStringsA
QueryPerformanceCounter
GetEnvironmentStringsW
GetEnvironmentStringsW
InterlockedIncrement
HeapSize
lstrlenW
GetTickCount
GetStartupInfoA
EnterCriticalSection
GetCurrentProcessId
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ