Static task
static1
Behavioral task
behavioral1
Sample
0fee8076d0f0bea9f882f23f9f2b24e1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fee8076d0f0bea9f882f23f9f2b24e1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fee8076d0f0bea9f882f23f9f2b24e1_JaffaCakes118
-
Size
90KB
-
MD5
0fee8076d0f0bea9f882f23f9f2b24e1
-
SHA1
1b09fbae664451c9c3d200fa8c7aedcac4b7ab31
-
SHA256
6abcb46c09f6b3ce61c1e830bf2bf5314eda8b9cd09b081d845019aa3011b29c
-
SHA512
a863667c990271e28efe78a59b5cd28b9d7f393a75e4be7bf9df66fde0b4a1f4f8d9dc42d48097cc585b672b8a16aae7c1ab5a78cbdb5da587e751c9d27e021e
-
SSDEEP
768:NCjhlkzVFuIGqih9bC4V1r2fAY7Yr/c5Er+faY2phB3hH6lDi/C:cvkOfbCU1yAY7YrEyUnGD3hH6lDi/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fee8076d0f0bea9f882f23f9f2b24e1_JaffaCakes118
Files
-
0fee8076d0f0bea9f882f23f9f2b24e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f45d57790418aafa62fb55eebd1258a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
SetEvent
VirtualProtect
GetCalendarInfoA
FindVolumeClose
FindAtomA
ReleaseMutex
GetStartupInfoA
CloseHandle
FindClose
GetModuleHandleA
Sleep
GetLastError
SearchPathA
GetTickCount
FindResourceExA
DeleteCriticalSection
lstrlenA
CreateMutexA
TlsGetValue
advapi32
RegEnumKeyExA
FreeSid
LsaFreeMemory
OpenEventLogA
LsaClose
CloseTrace
RegCreateKeyExA
RegCloseKey
AccessCheck
GetFileSecurityA
IsValidSid
LsaSetSecret
CloseEventLog
RegLoadKeyA
RegCloseKey
msdtcuiu
DtcPerfOpen
DtcPerfClose
DllRegisterServer
DllGetClassObject
DtcPerfCollect
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewmgyrw Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE