Static task
static1
Behavioral task
behavioral1
Sample
0acafd1c123715f6ee82e7383937150a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0acafd1c123715f6ee82e7383937150a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0acafd1c123715f6ee82e7383937150a_JaffaCakes118
-
Size
274KB
-
MD5
0acafd1c123715f6ee82e7383937150a
-
SHA1
a1a319eb4a0ed57d975a13b494c5e5cd2354c7d1
-
SHA256
b028717b1c016e7b59e59b46d463681950e881ef55bc22f5a4a44e292b1681c2
-
SHA512
538313c56ffc7532c856bb0041102ab0c9430d7c076569982fd8437a0d30d3e6bc670fb7e29aace7c0da0b2c8cb178c357603dba726c4b9d118c38c0f0e276db
-
SSDEEP
6144:MUSmyBbofZwQcnCSujRtGz+7zlBcf8uW9IoQSKLsVhR7BPugWZSIMnjZNT:MUSpMfZ33jRH/unXLsVNPyShnjZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0acafd1c123715f6ee82e7383937150a_JaffaCakes118
Files
-
0acafd1c123715f6ee82e7383937150a_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fc590714b3cd7c78fcaf22a6930d8ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetProcAddress
GlobalSize
FindFirstFileW
GetVersionExW
GetAtomNameA
Sleep
MulDiv
DeleteCriticalSection
FindFirstChangeNotificationW
LoadResource
FreeLibrary
GetVersionExA
InitializeCriticalSection
CloseHandle
GetPrivateProfileIntW
GetTickCount
WritePrivateProfileStringW
FindNextChangeNotification
GetModuleFileNameW
EnumResourceTypesW
FindResourceW
LockResource
GetPrivateProfileStringW
LoadLibraryW
lstrlenW
GetCurrentDirectoryW
LoadLibraryA
IsBadCodePtr
FindClose
GlobalUnlock
MultiByteToWideChar
GlobalAlloc
GetModuleHandleW
GlobalLock
FindCloseChangeNotification
GetLocaleInfoW
shell32
SHGetImageList
SHFileOperationW
SHBrowseForFolderA
CommandLineToArgvW
ShellExecuteExW
SHGetFolderPathW
ShellExecuteExA
ShellExecuteW
SHGetPathFromIDListA
SHGetFileInfoA
Shell_NotifyIconA
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ