Static task
static1
Behavioral task
behavioral1
Sample
0c6845d60ae3b29a8a23965053a353dc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c6845d60ae3b29a8a23965053a353dc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0c6845d60ae3b29a8a23965053a353dc_JaffaCakes118
-
Size
319KB
-
MD5
0c6845d60ae3b29a8a23965053a353dc
-
SHA1
b433a25b3d93320680e686751ba24213f4a39836
-
SHA256
6b23bdc9fe06ef2f0cc49b7f038e2534b8ef9a262586805a69700f0ad2b87b0d
-
SHA512
687ed4b2f13372437325ce43cfa7f494ccde821befa7110e797f25c8683ef0bc2baa3c77ba59b48f03eba999d5cb64bd9b4dc0189669a9b5e13b1f31a2dfd8c7
-
SSDEEP
6144:SKFzw4HrhLSXmwpfs1MMT1khCX12k7XVVee5NWperQydc05xL6JPOWA0L:TFUyrhapU1MMT1koX12k7XVVfWperdda
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c6845d60ae3b29a8a23965053a353dc_JaffaCakes118
Files
-
0c6845d60ae3b29a8a23965053a353dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
e942e4e80e3c99071ddc79697778bb54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
FreeResource
SizeofResource
LoadResource
lstrlenA
LoadLibraryA
CreateDirectoryA
GetStartupInfoA
GetModuleHandleA
lstrcpyA
lstrcmpA
lstrcatA
IsDBCSLeadByte
GetFileAttributesA
lstrcmpiA
GetProcAddress
user32
EndPaint
BeginPaint
LoadBitmapA
DefWindowProcA
GetSystemMetrics
SystemParametersInfoA
CharNextA
wsprintfA
LoadStringA
DestroyWindow
MessageBoxA
UpdateWindow
CreateWindowExA
RegisterClassA
ReleaseDC
OffsetRect
InflateRect
DrawTextA
GetDC
gdi32
SelectObject
CreatePalette
SetTextColor
TextOutA
DeleteObject
DeleteDC
GetObjectA
SetBkMode
CreateFontIndirectA
GetTextExtentPoint32A
GetStockObject
Rectangle
SelectPalette
GetDeviceCaps
CreateDIBitmap
SetStretchBltMode
RealizePalette
CreateCompatibleDC
BitBlt
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegCloseKey
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strchr
free
malloc
_controlfp
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE