Static task
static1
Behavioral task
behavioral1
Sample
0f9de77545c9687c8c6b6b5859bdebd3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f9de77545c9687c8c6b6b5859bdebd3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f9de77545c9687c8c6b6b5859bdebd3_JaffaCakes118
-
Size
206KB
-
MD5
0f9de77545c9687c8c6b6b5859bdebd3
-
SHA1
410ca9bb320d53ea987602be59d275770e56d6e3
-
SHA256
c677b25cc4a9fd11823db64f125c3d4c27fc60bbac90199a57d7d0e40dfb5c86
-
SHA512
9f8a59b430a4e2ca46371f12cbb7029ef7ac33d770baff34a684f1924e01594c7c02b299ceea45d52a5a8d080cfa11d2d13679a3b6a042bf8897c94cfe09ff57
-
SSDEEP
6144:Mq1xZTn8TRWZDlTyTfR3VKygpEYnIEiKbB:VPTywRlTyTfn9iB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f9de77545c9687c8c6b6b5859bdebd3_JaffaCakes118
Files
-
0f9de77545c9687c8c6b6b5859bdebd3_JaffaCakes118.exe windows:5 windows x86 arch:x86
3e06addf3ea7cae23e147c861c7b6168
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
vulan_cr
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
PlaySoundA
vulanhookprof
VulanUnHookDll
user32
CharNextA
gdi32
SetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegSetValueExA
shell32
Shell_NotifyIconA
shlwapi
PathFindExtensionA
oledlg
ord8
ole32
CoFreeUnusedLibraries
oleaut32
SysFreeString
Sections
.text Size: 190KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE