Static task
static1
Behavioral task
behavioral1
Sample
0c5ef795ffcf0aa74e27a76698319754_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c5ef795ffcf0aa74e27a76698319754_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c5ef795ffcf0aa74e27a76698319754_JaffaCakes118
-
Size
250KB
-
MD5
0c5ef795ffcf0aa74e27a76698319754
-
SHA1
3d1ec8a3020e061e8645fa33dec121601bb04e80
-
SHA256
31c0f1e0d81293f47eb2888bc818a264ad9f037418bb7c28ff9047cac6719012
-
SHA512
34db937222fbe3a27589ed3c667c1d32a702e0a017a5fb12dc1dadbb0f55d012c4aa23e310f8cb9ea974cc7b16483934e4dd48633de4f62d28e85cfa4c5cf772
-
SSDEEP
3072:z8uFqy/b9ztKLKwikmxoLU0/vTuOb7EXllXSLsCZCP6s8Z7OnZi2VCKude0W9wls:Q/GJztKmwiCyOKgBZCP6r7IpuYt9BMct
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5ef795ffcf0aa74e27a76698319754_JaffaCakes118
Files
-
0c5ef795ffcf0aa74e27a76698319754_JaffaCakes118.exe windows:4 windows x86 arch:x86
5facd15297699bdfd252e659a2e6a18a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
WaitForSingleObject
GetVersionExW
lstrlenW
lstrcpyW
lstrcpynW
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
CreateMutexA
GetProcAddress
LoadLibraryA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
inseng
DownloadFile
DllCanUnloadNow
sensapi
IsNetworkAlive
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 100KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 118KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ