Static task
static1
Behavioral task
behavioral1
Sample
0d8c915fc725c8f767884e2c067492fd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0d8c915fc725c8f767884e2c067492fd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0d8c915fc725c8f767884e2c067492fd_JaffaCakes118
-
Size
361KB
-
MD5
0d8c915fc725c8f767884e2c067492fd
-
SHA1
2714d6d60ec6827fe2dc919b7584423e8e63ab70
-
SHA256
38eabf3b6f3120edd3bb8e3103fdcdf19075fbfcffcde4e3bcd7c534690f4404
-
SHA512
6dc13fb0db99b2c2c576c5045193ba602f4cd10515d1a2f897f0a31d7590645db257e5f1d7e22bd44b7e6746c1c6fbf002abdb8c1986b7dc805efd37ee6b1d34
-
SSDEEP
6144:kYtUIr+OXOBaU7iGYiJkaV2OFbC4XEqPTY/U1GvbYG+XtLETkzmo:kYtUZxgU7iGYiJkaC2fPTY/U8vbYj54O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8c915fc725c8f767884e2c067492fd_JaffaCakes118
Files
-
0d8c915fc725c8f767884e2c067492fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8fbbfd561b090d32ca6a057677993eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
OpenMutexA
SetEvent
CreateMutexA
SearchPathA
CloseHandle
GetCommandLineA
FreeConsole
VirtualProtect
SetLastError
GetModuleHandleA
FindClose
Sleep
DeleteCriticalSection
GetVersionExW
GetTickCount
FindResourceExA
CreateThread
GetLastError
TlsGetValue
advapi32
LsaFreeMemory
FreeSid
LsaClose
OpenEventLogA
RegCloseKey
LsaSetSecret
IsValidSid
RegEnumKeyExA
RegLoadKeyA
GetFileSecurityA
CloseTrace
EqualSid
RegCreateKeyExA
CloseEventLog
RegCloseKey
loghours
DirSyncScheduleDialog
DialinHoursDialogEx
DialinHoursDialog
LogonScheduleDialog
DirSyncScheduleDialogEx
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ