Static task
static1
Behavioral task
behavioral1
Sample
0a5dc00be3de3cc2f406c821f2e6e08c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a5dc00be3de3cc2f406c821f2e6e08c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a5dc00be3de3cc2f406c821f2e6e08c_JaffaCakes118
-
Size
125KB
-
MD5
0a5dc00be3de3cc2f406c821f2e6e08c
-
SHA1
4efbab387150e4e9733264b7b29b3abb3411116b
-
SHA256
17bb0fc00aed24947841c9360e656e885a4ebd99126555609f675b4324afc130
-
SHA512
9dbcb4977d75c3ed0e61f7c0e6469cfd1992ad785982aa76f37671bb152db0a2f00b1a571486546f39a5fdcdb4f543491d52ee31ffdbc9aac2f8951bd2bbb949
-
SSDEEP
1536:cVnwzfj/N8f+ffQ6809lUB/dJ/lCgV7xGXfFdHfY:cVwTjlnTw/lCKAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5dc00be3de3cc2f406c821f2e6e08c_JaffaCakes118
Files
-
0a5dc00be3de3cc2f406c821f2e6e08c_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d4389b7f73fcdaf408f7f57ddee074e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateMutexA
TerminateThread
WaitForSingleObject
ResumeThread
SuspendThread
lstrcatA
lstrcpyA
CreateThread
lstrcpynA
DeleteFileA
CreateDirectoryA
lstrlenA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetFileSize
CreateFileA
GetModuleFileNameA
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetVersionExA
SetFileAttributesA
GetTempPathA
WriteFile
ReadFile
SetFilePointer
ReleaseMutex
CreateProcessA
GetStartupInfoA
GetACP
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
LoadLibraryA
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
CloseHandle
GetFileAttributesA
GetCommandLineA
GetExitCodeProcess
Sleep
RtlUnwind
HeapAlloc
HeapFree
SetEndOfFile
GetFileType
GetVersion
ExitProcess
GetCPInfo
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
user32
wsprintfA
LoadStringA
SetWindowTextA
MessageBoxA
GetDlgItem
GetSystemMenu
PostMessageA
GetMenuItemID
EnableMenuItem
EnableWindow
SendMessageA
IsWindowVisible
KillTimer
ShowWindow
EndDialog
SetTimer
DialogBoxParamA
CharNextA
GetMenuItemCount
gdi32
DeleteObject
CreateFontA
comctl32
ord17
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ