Static task
static1
Behavioral task
behavioral1
Sample
08222cf1cc06d64fca463f99f605704b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08222cf1cc06d64fca463f99f605704b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08222cf1cc06d64fca463f99f605704b_JaffaCakes118
-
Size
41KB
-
MD5
08222cf1cc06d64fca463f99f605704b
-
SHA1
54b946a94aab415e9570807c3a968b5a0b65064b
-
SHA256
5a34518b9f564eac4412c496304ac17bc41e9d526c0eba59359bf5a5115a0b91
-
SHA512
3bdfa254ba2900fc6b1919c9ddff69a1f269cd06974951a68789d985b6532b38c5b97d7b5a9931bf11c5750140bc213743682242c7a8e55eef7d2883b6b5b4f5
-
SSDEEP
768:KlrKLD4aK5jBuo8pZhZSbQVUlLJE9tbb7IT:j4aKV4THhZSbQVUlLJmbHIT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08222cf1cc06d64fca463f99f605704b_JaffaCakes118
Files
-
08222cf1cc06d64fca463f99f605704b_JaffaCakes118.exe windows:5 windows x86 arch:x86
0027849aac361eb923525b74def0aee9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_setmbcp
_EH_prolog
_mbscmp
strcmp
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcat
__CxxFrameHandler
strcpy
kernel32
SetErrorMode
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
user32
SendMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetClassLongA
SetCursor
IsIconic
SetFocus
EnableWindow
GetDlgItem
SetClassLongA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RLPack Size: 22KB - Virtual size: 95KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ