Static task
static1
Behavioral task
behavioral1
Sample
0fcc2e2f6250534d2d4d4b5af7204d41_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fcc2e2f6250534d2d4d4b5af7204d41_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fcc2e2f6250534d2d4d4b5af7204d41_JaffaCakes118
-
Size
274KB
-
MD5
0fcc2e2f6250534d2d4d4b5af7204d41
-
SHA1
0d5afda586bfbb14426c1152aed6c9c64cce542a
-
SHA256
2dd4e4c2c03fb06f848652173cf8102a8e2f6129e0838416c989fae86b3a341d
-
SHA512
1fc0e8b87da0315586d86dd20baa4e8a3f7d1f171b4053d85a1e8438f1648335a2eed90397313f50d53503998c6c0bb8023b95d648489ed728e4cf71b448bb2a
-
SSDEEP
3072:GZ4HdfXqXtrRYSHacQr1ANLffGs+f/z2f7QsMp0FpQ9FoE:Y4H+trRD3QruxXKHz2f0sMp+mHoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fcc2e2f6250534d2d4d4b5af7204d41_JaffaCakes118
Files
-
0fcc2e2f6250534d2d4d4b5af7204d41_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bf4a43ddcdd88e24f1472fe59d35f72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GlobalLock
GetTapeStatus
CreateHardLinkA
FindAtomA
GetOEMCP
GetCommState
GetUserDefaultLangID
GetStdHandle
ClearCommBreak
ExitProcess
CloseHandle
CreateJobSet
GlobalFlags
FormatMessageA
VirtualAlloc
GlobalFree
GetProcessHeap
GetModuleHandleA
GetVolumePathNamesForVolumeNameA
GetProfileStringA
user32
RegisterClassA
ShowWindow
IsIconic
EndPaint
GetForegroundWindow
GetClassNameA
GetClassInfoExA
ReleaseDC
GetWindow
GetDC
BeginPaint
GetActiveWindow
GetFocus
ValidateRect
GetParent
GetWindowTextA
DrawEdge
GetWindowTextLengthA
CloseWindow
wsock32
WSACleanup
WSAGetLastError
WSAStartup
WSAAsyncSelect
WSAIsBlocking
lpk
LpkInitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ