Static task
static1
Behavioral task
behavioral1
Sample
0d8dc21568dfe5909d4976b3d6614f46_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d8dc21568dfe5909d4976b3d6614f46_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d8dc21568dfe5909d4976b3d6614f46_JaffaCakes118
-
Size
68KB
-
MD5
0d8dc21568dfe5909d4976b3d6614f46
-
SHA1
0c169eb14b7241733320a8fe15df1dc2031925f2
-
SHA256
0a6afb4a614b0165e71727e04ece881b19b436320ce44215341c78ff6ddb1a03
-
SHA512
f6483fc5dc098ee61baf77e0ba61598218b3d5e5476992044e2875c7791376f7d9c26bcfc3b2ec09ae64a2c94e27bc86a229357a22b823ff38de5ee32d7584f6
-
SSDEEP
768:yw4Rpory4vh6ocAQQq8/6O1mxLsRXoUz9GuziZe2DoJyC:KRpNfo7EIj8aGgGn0Jy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8dc21568dfe5909d4976b3d6614f46_JaffaCakes118
Files
-
0d8dc21568dfe5909d4976b3d6614f46_JaffaCakes118.exe windows:4 windows x86 arch:x86
889707df3f383256d0e176948366f736
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetDriveTypeA
GetLogicalDriveStringsA
HeapDestroy
GetFileType
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
CreateProcessA
GetStringTypeA
HeapAlloc
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
user32
LoadStringA
MessageBoxA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE