Static task
static1
Behavioral task
behavioral1
Sample
0693137015f1d025708945ca1684f367_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0693137015f1d025708945ca1684f367_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0693137015f1d025708945ca1684f367_JaffaCakes118
-
Size
2.7MB
-
MD5
0693137015f1d025708945ca1684f367
-
SHA1
c33e89a17881f378d040bf0469f86567d191df8f
-
SHA256
da5d6104426d34b6858287e30fe9bbd10af46c6f82dd04611f431d39178ffe41
-
SHA512
8dbce51d691674ceb85b990883c92fbbcdd4ea792b9e98ee76cdfecbdd2a7d0c4c543f2c2fa9440459f2fb55dd485213564de7f34fbd478967216a1a3e0dc7f7
-
SSDEEP
49152:gHy2rJk+RbOga8Fuiw06uTkPsV6k/rShlOm4f8bJDEv4DL:UvrJ7aOeATqe6k/rS34f8bJ84DL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0693137015f1d025708945ca1684f367_JaffaCakes118
Files
-
0693137015f1d025708945ca1684f367_JaffaCakes118.exe windows:4 windows x86 arch:x86
c96b2a2a6e4ae1927a1cee6154244596
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LockResource
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
CallWindowProcA
advapi32
AdjustTokenPrivileges
oleaut32
SysReAllocStringLen
version
GetFileVersionInfoA
gdi32
CreateCompatibleBitmap
ole32
ProgIDFromCLSID
comctl32
ImageList_GetIconSize
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
winmm
sndPlaySoundA
sysio.sys
EndHook
Sections
CODE Size: - Virtual size: 1003KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ