Static task
static1
Behavioral task
behavioral1
Sample
0abbec4a53481ed26f75c53facd44cc5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0abbec4a53481ed26f75c53facd44cc5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0abbec4a53481ed26f75c53facd44cc5_JaffaCakes118
-
Size
248KB
-
MD5
0abbec4a53481ed26f75c53facd44cc5
-
SHA1
ea5f440e042c5b33c42a33b58aa0746a7b849a0a
-
SHA256
c667912978b2dcc1d8a3e5edfe2b3ace94ccdb5ed679b4b92d11930782ada460
-
SHA512
166aaf63e1a86ad40bb66cfe4d08ea4c9e615587c50f252193bc9918d02f88f9309f8ae1e5d23b18fe1f5b48224ee95599107575cf76033dbbae2a15cb76e2b6
-
SSDEEP
3072:AjfS5gc22/R5mwSWw5ej2KyKUn+avR8vBpsBs0a7owfuMFcg/sK7+5PpmMc45UId:AjfmDCNHkClKUnxvCvvz0SmLlKaaD4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0abbec4a53481ed26f75c53facd44cc5_JaffaCakes118
Files
-
0abbec4a53481ed26f75c53facd44cc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e9f8141fc2f68e27938941bfb5dfbf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
DeleteAtom
CreateMutexA
GlobalUnlock
VirtualQuery
SetLastError
HeapCreate
CloseHandle
GetProcessHeap
GlobalFree
ReleaseMutex
GetModuleHandleA
TlsGetValue
GetExitCodeProcess
CreateFileA
GetCurrentThreadId
lstrlenW
GetEnvironmentVariableA
LoadLibraryExW
GetStdHandle
user32
DispatchMessageA
CallWindowProcA
DrawEdge
GetDlgItem
GetIconInfo
CreateMenu
GetDC
IsWindow
DrawMenuBar
FillRect
CheckRadioButton
CreateWindowExA
SetFocus
ntshrui
IsPathSharedW
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
IsPathSharedA
msasn1
ASN1BERDecEoid
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 206KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ