Static task
static1
Behavioral task
behavioral1
Sample
0a60a117393f058fc517180ae63bf999_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a60a117393f058fc517180ae63bf999_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a60a117393f058fc517180ae63bf999_JaffaCakes118
-
Size
396KB
-
MD5
0a60a117393f058fc517180ae63bf999
-
SHA1
475086ed7f97140c8601ec884bb68b36e49b379e
-
SHA256
e210b7d9738b1b2ff7524d92cae92a78dbe8c9b531f12e3fc1505bb9e3f62ba7
-
SHA512
eaf7ea42d0c8fd9f25ca5b1d3c325982fca5d75665bd92d47920af77271e24933312d0ab5022ca64476ff62695334dc280da4b9ba3235f180f036e0e1547fc0c
-
SSDEEP
6144:2qFzxC7KV9+fccfLxanw25hKWRodAUz5Y17PrpofObS6ogcxETdWg/:3RSj5ejrpoWdogc2Eg/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a60a117393f058fc517180ae63bf999_JaffaCakes118
Files
-
0a60a117393f058fc517180ae63bf999_JaffaCakes118.exe windows:4 windows x86 arch:x86
f42f567e06bc6f414229e2b864c0522a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord457
ord408
ord915
ord398
ord766
ord676
ord775
ord565
ord564
ord395
ord254
ord80
ord231
ord802
ord435
ord432
ord613
ord908
ord351
ord431
ord784
ord336
ord334
ord895
ord240
ord239
ord856
ord361
ord527
ord316
ord839
ord525
ord875
ord878
ord517
ord519
ord337
ord183
ord266
ord429
ord374
ord709
ord515
ord521
ord881
ord933
ord942
ord913
ord939
ord948
ord205
ord218
ord241
ord945
ord476
ord578
ord209
ord534
ord936
ord128
ord577
ord151
ord931
ord926
ord930
ord929
ord928
ord404
ord588
ord584
ord498
ord509
ord924
ord406
ord502
ord491
ord243
ord597
ord583
ord224
ord363
ord319
ord486
ord475
ord478
ord927
ord831
ord50
ord109
ord760
ord372
ord840
ord247
ord896
ord332
ord559
ord444
ord814
user32
ord512
ord199
ord274
ord446
ord97
ord611
ord309
ord666
ord189
ord347
ord179
ord556
ord590
ord350
ord438
ord363
ord156
ord86
ord83
ord584
ord198
ord145
ord13
ord647
ord313
ord308
ord307
ord346
ord197
ord57
ord420
ord428
ord58
ord152
ord423
ord432
ord326
ord641
ord201
ord14
ord555
ord269
ord256
ord596
ord595
ord404
ord227
ord28
ord367
ord373
ord644
ord457
ord185
ord301
ord606
ord723
ord710
ord60
ord572
ord376
ord276
ord567
ord273
ord253
ord195
ord65
ord452
ord349
ord399
ord677
ord683
ord436
ord680
ord151
ord692
ord95
ord9
ord514
ord268
ord143
ord444
ord440
ord535
ord659
ord700
ord315
ord162
ord678
ord435
ord477
ord159
ord635
ord271
ord27
ord312
ord472
ord651
ord562
ord726
ord687
ord71
ord77
ord148
ord729
gdi32
ord222
ord364
ord445
ord42
ord545
ord422
ord81
ord437
ord562
ord466
ord462
ord72
ord45
ord70
ord52
ord59
ord528
ord500
ord19
ord573
ord535
ord527
ord586
ord587
ord439
ord591
ord534
ord141
ord46
ord406
ord144
comdlg32
ord108
ord103
ord112
ord101
ord110
shell32
ord139
ord138
ord273
ord313
ord140
ole32
ord291
ord277
ord290
ord254
ord292
winmm
ord187
ord115
ord192
ord120
ord127
ord118
ord123
ord121
ord116
ord128
ord67
ord166
comctl32
ord5
ord17
ord83
ord45
ord50
ord64
ord22
wininet
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
playlist
SetHBitmap
DoPlayList
fft
ord5
ord3
avcdrom
ord51
ord54
equ
ord2
ord1
facehelp
ord33
ord12
ord25
ord38
ord11
ord13
ord7
ord32
ord29
ord30
ord8
ord9
ord6
ord34
ord35
Sections
.text Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 213KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE