Static task
static1
Behavioral task
behavioral1
Sample
0d520408bfd0a8e3f8fcd67beb8d8946_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d520408bfd0a8e3f8fcd67beb8d8946_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d520408bfd0a8e3f8fcd67beb8d8946_JaffaCakes118
-
Size
291KB
-
MD5
0d520408bfd0a8e3f8fcd67beb8d8946
-
SHA1
2667a0eb5f1a366f608ec0b6d244afe54fdb3fe3
-
SHA256
d7a09f7b4773323f225809bbe69052489398235052630bf84e13fec4f361a297
-
SHA512
09ddd1af46b3fc641521ad57da19dc03156fc63a03c40495ea937bd05a5756ee3232ce5c58c51f7b8e6909bb6654c9e1106ccc96f76ef29d273990bb57ecc821
-
SSDEEP
3072:y3E9jT31RA1jV2F/763G8CYT3Zcw1prwQ5baL84Vr5bWSEjWPn/Xl1Xbdxcvm7B3:y3uF6Vax2ZcwXr3baLDxVp7rl6fzkWt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d520408bfd0a8e3f8fcd67beb8d8946_JaffaCakes118
Files
-
0d520408bfd0a8e3f8fcd67beb8d8946_JaffaCakes118.exe windows:4 windows x86 arch:x86
a72397e9432b4fd833331bc1ca98abab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
EnterCriticalSection
ExitThread
FindFirstFileA
FindNextFileA
GetCommandLineA
GetCurrentThread
GetDateFormatA
GetLastError
GetProcessHeap
GetProfileStringA
GetTickCount
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
LoadLibraryA
SetEvent
SetFilePointer
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrlenA
user32
CharNextA
DestroyMenu
EnumChildWindows
GetKeyState
GetLastActivePopup
GetParent
GetWindow
IntersectRect
MessageBoxW
PaintDesktop
RegisterClassExW
SendDlgItemMessageW
SendMessageW
SetMenuDefaultItem
TranslateMessage
WaitMessage
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ