Static task
static1
Behavioral task
behavioral1
Sample
0a30f3d17668a0137fa9ce2078d3df13_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a30f3d17668a0137fa9ce2078d3df13_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a30f3d17668a0137fa9ce2078d3df13_JaffaCakes118
-
Size
2.9MB
-
MD5
0a30f3d17668a0137fa9ce2078d3df13
-
SHA1
28b928e60a070fcc1fe651313dce07cd564c3783
-
SHA256
8a06f9c1a68df0cd9569f78cd3eb35eb560699f66f07c7b46ddd6fbd01da3018
-
SHA512
f416d28c42f8b081707ba91b8a21dbf6418b91c596b05044a7b6e6eaef19a95a5a5ba4a7875cdad5766c3e9cbaf6ec1027d9820b8a1856fbda1b777a0fdc8ec9
-
SSDEEP
49152:8ELykMObp36UtP19t/+k2lpwI6d0Wc5zHsXnwZvE0XceGPwD45JwXt8SXIZmISX:XaOAUtPL5JMod0WezHsXoEOChw1Rn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a30f3d17668a0137fa9ce2078d3df13_JaffaCakes118
Files
-
0a30f3d17668a0137fa9ce2078d3df13_JaffaCakes118.exe windows:5 windows x86 arch:x86
f0cded3a57f3986bdffbfb5a511f0ac4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetClassNameA
MessageBoxA
gdi32
SetBkMode
winmm
midiStreamOut
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
StgOpenStorageOnILockBytes
oleaut32
UnRegisterTypeLi
comctl32
ord17
oledlg
ord8
ws2_32
recvfrom
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.upx1 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.upx2 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ