Static task
static1
Behavioral task
behavioral1
Sample
0b5b777d72d9aeabc83b82930b989de1_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0b5b777d72d9aeabc83b82930b989de1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b5b777d72d9aeabc83b82930b989de1_JaffaCakes118
-
Size
92KB
-
MD5
0b5b777d72d9aeabc83b82930b989de1
-
SHA1
be33d64e7e6826fb8eb7d971b7fbb403ff4f2577
-
SHA256
728a91f2a5481ce677623001374376c6d50bdf18290ba84160cecea9560be664
-
SHA512
bab65a9f250fcb14ea3f02f2a414e75b312f6ec24e5745b3b8360bcf523332fec6c194e9724da7056ad36003a7f72262250a4d233ad4ef2e3ebba18a9402aa90
-
SSDEEP
1536:m5Ct5Z30GflOvfkcUDxvESMp+NLfSZPS89yFBB1kGH:mEt5eUIvGv7K0MkFb1kO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5b777d72d9aeabc83b82930b989de1_JaffaCakes118
Files
-
0b5b777d72d9aeabc83b82930b989de1_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e0cbaa2c138e8cb6093f191e56c0058
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
lstrlenW
TlsGetValue
HeapCreate
GlobalUnlock
LoadLibraryExW
DeleteAtom
SetLastError
GetPriorityClass
GlobalFree
CloseHandle
SetEnvironmentVariableA
GetStdHandle
VirtualQuery
CreateFileA
GetModuleHandleA
FindResourceA
GetCurrentThreadId
ReleaseMutex
GetExitCodeProcess
user32
CheckRadioButton
FillRect
GetDlgItem
GetDC
SetFocus
CallWindowProcA
DrawMenuBar
DrawEdge
IsWindow
CreateWindowExA
DispatchMessageA
CreateMenu
GetIconInfo
ntshrui
IsPathSharedW
GetLocalPathFromNetResourceA
IsPathSharedA
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
istimcz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE