Static task
static1
Behavioral task
behavioral1
Sample
0ab610940c1195ed81a18e755a5563c1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ab610940c1195ed81a18e755a5563c1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ab610940c1195ed81a18e755a5563c1_JaffaCakes118
-
Size
382KB
-
MD5
0ab610940c1195ed81a18e755a5563c1
-
SHA1
ba09d1b931f2ca1ebc63d6a5ec3bbae3d9d29afc
-
SHA256
0995e0dd89acdc4caf0e70c5db447c8d2541d530e795198f2866f11b702ce12e
-
SHA512
90d58e4317307e4dd55b82742b60e9eb6a0c3f995fe5e3b2652381e4209772d6f07b671eaad867f3bb0fd942688e7d546c29adf46f2e2564e6b6a955ff79655c
-
SSDEEP
6144:A7VQ2RM2t9NmwZPJCJi2oU0zBIDoGbNjEg9XHD73g3+Gq/nTngb0L1DdE:A5Q2RM29N/RJHUlzNQAXXg3RggAjE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab610940c1195ed81a18e755a5563c1_JaffaCakes118
Files
-
0ab610940c1195ed81a18e755a5563c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e2302fba8c4fbc0412acf1774869ace
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
LocalFree
GetEnvironmentVariableW
lstrlenA
GetCurrentThreadId
CloseHandle
ReleaseMutex
GetDriveTypeA
GetLocalTime
ResetEvent
VirtualAllocEx
WriteFile
CreateEventW
GetPrivateProfileIntW
IsBadStringPtrA
GlobalFree
SetEvent
InitializeCriticalSection
GetCurrentProcessId
LoadLibraryW
user32
GetSysColor
CreateWindowExA
GetKeyboardType
GetSysColor
GetClientRect
DrawStateW
SetFocus
CallWindowProcW
GetClassInfoA
DispatchMessageA
GetCursorInfo
IsWindow
EndDialog
mmcshext
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ