Static task
static1
Behavioral task
behavioral1
Sample
0d968d599a65566b645c336b6e25c58b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d968d599a65566b645c336b6e25c58b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d968d599a65566b645c336b6e25c58b_JaffaCakes118
-
Size
558KB
-
MD5
0d968d599a65566b645c336b6e25c58b
-
SHA1
85375f1547da9323c35c209ec2d1578fea971ece
-
SHA256
f0d74e28af70c94971781f03a17aeb3f8ce0f8cdd7b174b9f6f02486141b0e0c
-
SHA512
ad141fdb87d7d41725dd0c049c2881b00856b34daff5b129d09c2125cf7c30dd750b6741464499d66016b73a3baf188407a0d2cca75e996d459d4b4048824430
-
SSDEEP
12288:aSEUSohQkY4E1N1uPlucRSKw+3w9Tfr1ujQ1KYJb5nraOWc:aSMnu9/z/w97Mj41Wfc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d968d599a65566b645c336b6e25c58b_JaffaCakes118
Files
-
0d968d599a65566b645c336b6e25c58b_JaffaCakes118.exe windows:4 windows x86 arch:x86
afb633846ff216133b431f62a2165b29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
LocalAlloc
GetDiskFreeSpaceExA
QueryDosDeviceW
GetTapeParameters
SetMailslotInfo
SetupComm
CopyFileExW
CreateWaitableTimerA
GetNumberFormatW
ScrollConsoleScreenBufferA
VirtualQueryEx
GetLongPathNameA
FindResourceExW
EnumResourceNamesW
GetFileInformationByHandle
ReleaseMutex
LCMapStringA
LoadLibraryExA
GetShortPathNameW
ClearCommBreak
GetProcessHeap
ReadConsoleOutputA
EnumSystemCodePagesA
LocalFileTimeToFileTime
CreateMutexA
CloseHandle
GetCompressedFileSizeW
DosDateTimeToFileTime
CompareStringA
ExitProcess
user32
GetMenuInfo
SendNotifyMessageA
GetDoubleClickTime
CharPrevW
GetUserObjectInformationA
comctl32
ImageList_GetIcon
advapi32
SetPrivateObjectSecurity
RegLoadKeyW
SetFileSecurityA
InitializeAcl
RegEnumValueA
RegRestoreKeyW
gdi32
GetCharacterPlacementA
GetEnhMetaFilePaletteEntries
SetPixel
Pie
EnumFontFamiliesExW
SetSystemPaletteUse
GetBkColor
CloseMetaFile
SetTextAlign
CreatePen
shell32
SHGetSpecialFolderPathW
ExtractIconExW
ws2_32
WSAAccept
WSASetLastError
WSAInstallServiceClassW
WSAEnumNameSpaceProvidersA
sendto
Sections
.text Size: 2KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ