Static task
static1
Behavioral task
behavioral1
Sample
0da662234c7bb2463eb4476432d8cc21_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0da662234c7bb2463eb4476432d8cc21_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0da662234c7bb2463eb4476432d8cc21_JaffaCakes118
-
Size
54KB
-
MD5
0da662234c7bb2463eb4476432d8cc21
-
SHA1
5c450bb40bcd91d59942fee633148234eda9ab21
-
SHA256
044d9efd38a8a8ff85c95915dc4685c3f4f5680c8dd4e6a45bfe33f56bcd620d
-
SHA512
67cf599d5ffc35e0e2bd6ae83231f8148d4f1c2ba73b141e31b813db8d4be290bca0a8dc0f40a2ce1c04e91ba78adacfd4ade869833fd1f2f26f2e85a3043735
-
SSDEEP
768:p5sSd8dLbhAWOmAyFx3r5iFmbB6hH9DR+uJgTHhEhzjQT/xdRtulbDtn9GG5:p2bnhAWOmA+UY1M9DR+uaBBBtyvPJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da662234c7bb2463eb4476432d8cc21_JaffaCakes118
Files
-
0da662234c7bb2463eb4476432d8cc21_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3bafddab50c0c27eb0629cead3debd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZCopy
LZOpenFileA
LZClose
kernel32
CloseHandle
CreateFileA
WriteFile
lstrlenA
SetFileTime
GetFileInformationByHandle
GetVersionExA
DeleteFileA
FlushFileBuffers
LockResource
SizeofResource
LoadResource
FindResourceExA
CreateDirectoryA
GetCurrentProcess
WaitForSingleObject
CreateProcessA
GetTempFileNameA
GetTempPathA
GetTickCount
lstrcatA
lstrlenW
GetSystemDirectoryA
ExitProcess
GetStartupInfoA
OpenProcess
GetCurrentProcessId
CopyFileA
GetModuleFileNameA
GetCommandLineA
HeapFree
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GlobalAlloc
GlobalFree
lstrcpyA
user32
wsprintfA
wsprintfW
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ