Static task
static1
Behavioral task
behavioral1
Sample
0c7a3e4d03f533d0d846f6d2438032cc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c7a3e4d03f533d0d846f6d2438032cc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c7a3e4d03f533d0d846f6d2438032cc_JaffaCakes118
-
Size
344KB
-
MD5
0c7a3e4d03f533d0d846f6d2438032cc
-
SHA1
70782342dc270082c1ebdedd49e35b3b270f40c8
-
SHA256
047bc1abf65ced6b6f275d3d1f6cc28f6ca1a523be84abf4108945c942dc3563
-
SHA512
fe785c6335d01dceac73adadc649b1075539a7a8aea044115baac166bd66f130a1bce3a7dd8fa0f93d275044ed372fe4b5fd86b145488f83ae6874241bde626c
-
SSDEEP
6144:tiY9fipoXhA5XTEiOmbLzZdrU6FkCs1PvWnP/KEAribRh:tREocYmbv7AYkCs1Pvqh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c7a3e4d03f533d0d846f6d2438032cc_JaffaCakes118
Files
-
0c7a3e4d03f533d0d846f6d2438032cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9f9af2ad0b44e4eaa23b3901c8e23c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileType
GetLastError
VirtualAlloc
VirtualFree
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
SetEndOfFile
SetFilePointer
WriteFile
DeleteFileA
WaitForSingleObject
GetVersionExA
SetThreadPriority
CreateProcessA
ReadFile
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetFileInformationByHandle
Sleep
GetVersion
ExitProcess
TerminateProcess
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadWritePtr
GetCPInfo
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
Sections
.text Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 4KB - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
clefyxx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE