Static task
static1
Behavioral task
behavioral1
Sample
0d79296d9143a73b8e13305f149b67e3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d79296d9143a73b8e13305f149b67e3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d79296d9143a73b8e13305f149b67e3_JaffaCakes118
-
Size
168KB
-
MD5
0d79296d9143a73b8e13305f149b67e3
-
SHA1
0b173b537bd239ff29fa2e7666c071bb6b206490
-
SHA256
89fcb94d395d23861e91d85636aee3c8a2381dd74b9e1490b2b4f4ba03468214
-
SHA512
b5abdddac0dd44df92470e65d3f427b49d53bd1ab0e62d2fb2af73fe4edcfb6652d2f78737c174507962ada78be3d278d4bb80d4c80ea8d40724978e0f778e49
-
SSDEEP
3072:COUlbCAqW7CPAR1i6XmddI538TbJ9E2jTyCRCYv/v9ZPe63rJ+0zad:zUlbC/ZAR1ifA8Tt9zmCRXX9ZPxIwa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d79296d9143a73b8e13305f149b67e3_JaffaCakes118
Files
-
0d79296d9143a73b8e13305f149b67e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
151ea502c77016c05543c1e4282bb0ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputCharacterA
FindFirstChangeNotificationA
FindResourceExA
SetFilePointer
SetFileApisToANSI
GetOEMCP
GetComputerNameExA
SetConsoleCursorInfo
GetSystemTimeAdjustment
SizeofResource
GetNativeSystemInfo
GetVolumeNameForVolumeMountPointA
MoveFileWithProgressA
GetThreadPriority
SetDllDirectoryA
ClearCommError
_lclose
Heap32First
ClearCommBreak
FatalExit
FindFirstVolumeMountPointA
GetLocaleInfoA
HeapCreate
Process32Next
CreateDirectoryExA
GetACP
PulseEvent
HeapAlloc
VirtualUnlock
GetConsoleTitleA
Thread32Next
VirtualLock
SetThreadIdealProcessor
LoadLibraryExA
SetHandleContext
MapViewOfFileEx
GetSystemDefaultUILanguage
SetProcessWorkingSetSize
ReadConsoleOutputCharacterA
GetSystemWindowsDirectoryA
IsValidCodePage
GetFileInformationByHandle
GetCompressedFileSizeA
GetPrivateProfileStructA
GetPrivateProfileStringA
OpenEventA
GetComputerNameA
FindVolumeMountPointClose
GetSystemDirectoryA
GetCurrentDirectoryA
GetThreadLocale
SetHandleCount
GetCurrentProcess
IsSystemResumeAutomatic
HeapSize
WaitNamedPipeA
GetCommModemStatus
GetWindowsDirectoryA
VirtualAllocEx
GetCommState
GetPrivateProfileStringW
GetDiskFreeSpaceA
TransactNamedPipe
SetHandleInformation
FindResourceA
GetVDMCurrentDirectories
secur32
FreeContextBuffer
LsaRegisterPolicyChangeNotification
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ