Static task
static1
Behavioral task
behavioral1
Sample
0b3112c6536e6b7c9934aa1726560e73_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b3112c6536e6b7c9934aa1726560e73_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b3112c6536e6b7c9934aa1726560e73_JaffaCakes118
-
Size
60KB
-
MD5
0b3112c6536e6b7c9934aa1726560e73
-
SHA1
986767ba6357b8517ffdca136c13d1782b1a6837
-
SHA256
9427ce0ad7e062f4754160d49c48fbfc9056f54104b2eb855ac81ea1246421d3
-
SHA512
b08242eaef6d8dafb445379ae9fe6897cc1fb57e8ff97bbe49fcb24b8e51d64359e89a907e85c12be4d155093a80bf1aa7751d4b854659237d849c09734d28a8
-
SSDEEP
768:dOSQPokw5ewReAS4sIsttee+0dGqWTvBfnuAuvyBPFpU1tF:dOPokLrlyeBGqW9fuDvestF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3112c6536e6b7c9934aa1726560e73_JaffaCakes118
Files
-
0b3112c6536e6b7c9934aa1726560e73_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4c3943dad80eabdacff5ca356841a38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
DeleteFileA
Sleep
GetSystemTime
Process32Next
GetCurrentProcessId
OpenProcess
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
CopyFileA
CreateDirectoryA
GetSystemDirectoryA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
GetLastError
WriteFile
ReadFile
TerminateProcess
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
user32
FindWindowExA
GetWindowTextA
wsprintfA
shell32
ShellExecuteA
winmm
timeGetTime
ws2_32
gethostname
WSAStartup
gethostbyname
inet_ntoa
rpcrt4
UuidCreateSequential
psapi
GetModuleFileNameExA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE