Static task
static1
Behavioral task
behavioral1
Sample
0d9c8e98f64d22a555e7287d3217d24d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d9c8e98f64d22a555e7287d3217d24d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d9c8e98f64d22a555e7287d3217d24d_JaffaCakes118
-
Size
82KB
-
MD5
0d9c8e98f64d22a555e7287d3217d24d
-
SHA1
02a2ad4969357946af2a7cab7d3e97abda7cf07e
-
SHA256
8e0b72a0cf5ce571824c7523fd6c7c03543d03a09c581815dec40deb3d3abb04
-
SHA512
4257255bbd0d9d3b53e60e8c28e38ab2e9a8f118abe9593e8348293778038ab0dff7f9a048a73108d7462562b586b04a7aa3d51e0eca3994124d54a88042c807
-
SSDEEP
1536:jHFqUZ2xrdxR6xhR+ccccccArCJ7eGX+lRbgte:jHEI2/axh5oXSJ0e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d9c8e98f64d22a555e7287d3217d24d_JaffaCakes118
Files
-
0d9c8e98f64d22a555e7287d3217d24d_JaffaCakes118.exe windows:4 windows x86 arch:x86
df19858463b4ee7a4d1d004f4eff5d81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CloseHandle
VirtualProtect
CreateThread
ReleaseMutex
AddAtomA
DeleteCriticalSection
TlsGetValue
GetModuleHandleA
HeapDestroy
SearchPathA
SetEvent
GetDiskFreeSpaceA
Sleep
GetLastError
FindResourceExA
GetConsoleFontSize
GetTickCount
lstrlenA
FindVolumeClose
user32
CreateWindowExA
DispatchMessageA
EnableWindow
EndDialog
CreateMenu
GetScrollBarInfo
DragDetect
CloseWindow
GetKeyState
DialogBoxParamA
IsIconic
CopyImage
CopyIcon
GetMessageA
hlink
HlinkClone
HlinkNavigate
HlinkResolveShortcut
HlinkTranslateURL
HlinkIsShortcut
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE