Static task
static1
Behavioral task
behavioral1
Sample
0f9815aab9d5a040ce1aaa65e74781cc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f9815aab9d5a040ce1aaa65e74781cc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f9815aab9d5a040ce1aaa65e74781cc_JaffaCakes118
-
Size
67KB
-
MD5
0f9815aab9d5a040ce1aaa65e74781cc
-
SHA1
b35cc5b79f1293710f0f4bdcdfb030f3a796cbe9
-
SHA256
cb70d4b18b1174bd71a117bffc209e8d479998c642b28f6b6889d81016f26b7c
-
SHA512
7bd3fc69beaa0c84843cde2b8d77ab533abb89fcbc7661d66a6767c220c771a779664b1de39ad728484a8aba3c58b7712a9c4bba2e3e0767f62763ac221a2b03
-
SSDEEP
768:zT2AfoZcqWr1Tr6WLJ75w8nYhyWnls8lVQGHexSpQYYB8QJnB0:GAf9qWr1v6WLJ75tGyilVBHde3DJnB0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f9815aab9d5a040ce1aaa65e74781cc_JaffaCakes118
Files
-
0f9815aab9d5a040ce1aaa65e74781cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf020afffb0169705d5c7726e8345b67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetLastError
SetLastError
GetCurrentThreadId
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 406KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ