Static task
static1
Behavioral task
behavioral1
Sample
0c7ae92db131da8b5fcf73aff2d95d45_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c7ae92db131da8b5fcf73aff2d95d45_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c7ae92db131da8b5fcf73aff2d95d45_JaffaCakes118
-
Size
45KB
-
MD5
0c7ae92db131da8b5fcf73aff2d95d45
-
SHA1
6afd6a87bd6a784479d0a958569f44b4dd87d9e4
-
SHA256
f5a9b26e8bd1fd694f4a97d011b7ac506ae9a69f0be49168b0bda6a5e3b8e3e5
-
SHA512
3698c192e3e934adc20b734c1377be85406ee16546b0d2c8fbff853080bbc5ec675ca237735b1aa516b2798a9cc2c2858f56d2c963b4230ca46bbbad9432e118
-
SSDEEP
384:rfD71P+zPPCQrxw5ZIUCvJNEQZfEynQpGsVJvF/lec0Acf:H7RqPPCQNw5ZrC/BEynQpGgJleH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7ae92db131da8b5fcf73aff2d95d45_JaffaCakes118
Files
-
0c7ae92db131da8b5fcf73aff2d95d45_JaffaCakes118.exe windows:1 windows x86 arch:x86
b532fd377dc2bc339069c0fbd54a1c3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualFree
InitializeCriticalSection
LoadLibraryA
VirtualFree
GetProcAddress
GetStartupInfoW
SetFilePointer
GetSystemTimeAsFileTime
GetTickCount
WaitForSingleObject
GetStartupInfoA
GetModuleFileNameA
SetEvent
GetTickCount
WaitForSingleObject
HeapFree
EnterCriticalSection
GetModuleHandleW
QueryPerformanceCounter
GetCommandLineA
HeapAlloc
SetEvent
CloseHandle
WaitForSingleObject
Sections
.euit Size: 33KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lgjm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uyik Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmeh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bfnk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lnon Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.csai Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.xaey Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ocfn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.akgi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE