Static task
static1
Behavioral task
behavioral1
Sample
0d75c8ae8920cb1565244c09ebfa0bd0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d75c8ae8920cb1565244c09ebfa0bd0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d75c8ae8920cb1565244c09ebfa0bd0_JaffaCakes118
-
Size
226KB
-
MD5
0d75c8ae8920cb1565244c09ebfa0bd0
-
SHA1
570fb1ace7008926c5111309d13146e4565d9e19
-
SHA256
2f59a2422145aa0071b83f5768336e2db2aef5b3c17a24d2e68f860d08f080da
-
SHA512
a412733faceaeb6447e3eb7b38d562b28f66c19ea6b84201e65817402bc88c5241de2b3c7df670285b314ccedddde46e03e29f5da505af85854d6b0a6a9ab702
-
SSDEEP
6144:8AcqBCkWLtdbuuoxrKQJO47x0md2MPTA:hcqBCZroQQJb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d75c8ae8920cb1565244c09ebfa0bd0_JaffaCakes118
Files
-
0d75c8ae8920cb1565244c09ebfa0bd0_JaffaCakes118.exe windows:4 windows x86 arch:x86
b3f2bda3c55655fd4921eb71b548fa00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ClearCommBreak
CopyFileA
DuplicateHandle
EndUpdateResourceW
ExitProcess
GetEnvironmentStringsW
GetShortPathNameA
GetThreadPriority
GetThreadSelectorEntry
ReadConsoleOutputCharacterW
SetVolumeLabelA
TlsAlloc
UnhandledExceptionFilter
_llseek
advapi32
CryptImportKey
CryptSetProviderA
LookupPrivilegeValueW
RegCreateKeyExW
RegDeleteKeyW
RegFlushKey
RegSaveKeyW
SetSecurityDescriptorGroup
gdi32
BitBlt
CreateColorSpaceA
CreateDIBPatternBrush
EnumFontFamiliesExA
EnumMetaFile
EqualRgn
GetCurrentObject
GetEnhMetaFileBits
GetICMProfileW
GetPaletteEntries
GetWorldTransform
Pie
StrokeAndFillPath
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ