Static task
static1
Behavioral task
behavioral1
Sample
0fd3dccb9e7401733614556aab236d7d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fd3dccb9e7401733614556aab236d7d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0fd3dccb9e7401733614556aab236d7d_JaffaCakes118
-
Size
76KB
-
MD5
0fd3dccb9e7401733614556aab236d7d
-
SHA1
eebd186532b5c431d45fb06302d5a33bf8ad50f3
-
SHA256
ecb4bf278a9faeea8165c6b21e4df5a885d9718db3df04a347877f6e2ac89412
-
SHA512
bcebd242c7da2cb4c1e4e3748b75f7c4955373bc24c7d7e8ffb3dac22c0b39bf53b2bb688bcf3261e26669b01fb6d71a0e8ef25f7c5351068588e97ef02d8a6a
-
SSDEEP
1536:lfDA7Ni2PhYZ3C+Nh8pA+lmm7qjh3rmKPN:l7gWthcA+lmBjZqMN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fd3dccb9e7401733614556aab236d7d_JaffaCakes118
Files
-
0fd3dccb9e7401733614556aab236d7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3ddf20d3705701a5966efce92815f94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
DeleteFileA
SetFileAttributesA
SetFileTime
GetCurrentProcess
GetFileAttributesA
GetFileTime
GetSystemDirectoryA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WaitForSingleObject
CreateThread
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
CreateEventA
OpenEventA
GetLastError
WriteFile
SetFilePointer
WideCharToMultiByte
SetEndOfFile
CloseHandle
CreateFileA
Sleep
GetModuleFileNameA
MultiByteToWideChar
GetVersionExA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
VirtualQuery
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetACP
GetOEMCP
GetCPInfo
ExitProcess
TerminateProcess
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
VirtualProtect
GetSystemInfo
user32
MessageBoxA
advapi32
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
ShellExecuteA
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ