Static task
static1
Behavioral task
behavioral1
Sample
0ce9dd8890b371a81a136f1d01b1d23c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ce9dd8890b371a81a136f1d01b1d23c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ce9dd8890b371a81a136f1d01b1d23c_JaffaCakes118
-
Size
408KB
-
MD5
0ce9dd8890b371a81a136f1d01b1d23c
-
SHA1
bed1530bfa37b934a51769e9eaa8543a6c8c076f
-
SHA256
9466d271a3eb09b0d5e4accf94bf2c8ed2388b377913de2229d2afe9497e7aec
-
SHA512
bf241c0c0778692097c60ec59cea262c4347811aa53138b3629d563f9fafc90583ed440d3dde3ee009d1415398a3df5bbf172cd7b764aab5fc2dd96047195d9b
-
SSDEEP
3072:BCyaDpQoM+JH+he0qkNogiz8MxngM0CPqxFZndp6cKgxjnDd8aPqD+DM:B6Dp5Pu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ce9dd8890b371a81a136f1d01b1d23c_JaffaCakes118
Files
-
0ce9dd8890b371a81a136f1d01b1d23c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5116840e9d65356e041453fa816c19d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
CloseHandle
SetThreadContext
SuspendThread
Sleep
ResumeThread
WriteProcessMemory
VirtualProtectEx
GetThreadContext
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
ExitProcess
FindFirstFileA
GlobalAlloc
SetFileAttributesA
FindNextFileA
DeleteFileA
TerminateProcess
CreateProcessA
SetCurrentDirectoryA
GetModuleFileNameA
LoadLibraryA
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
CreateFileA
ReadProcessMemory
GlobalFree
GetModuleHandleA
GetProcAddress
GetVersion
GetWindowsDirectoryA
GetStartupInfoA
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapFree
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
ReadFile
SetEndOfFile
user32
MessageBoxA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ