Static task
static1
Behavioral task
behavioral1
Sample
0df752c2d387a53dc187b2f0b1807ab6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0df752c2d387a53dc187b2f0b1807ab6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0df752c2d387a53dc187b2f0b1807ab6_JaffaCakes118
-
Size
272KB
-
MD5
0df752c2d387a53dc187b2f0b1807ab6
-
SHA1
1e57d7cd04ceb2a796bbd7e64263a6b35681b788
-
SHA256
1fbcaf060e5129526db75573ef3b1c22230d193a8917e77dcdc82d25d96594ac
-
SHA512
ec94b999bc56fc1c276b842cb9769688dc8f13e57de917b1715fa0f616565873cfc850011fd68d6b77ea7c32b9e469f7ce615105fb751b609b2d99882fd6e460
-
SSDEEP
6144:nSt7EG/rHN2ibzFc0beRf6Frgw8ajNZ/+:i7hXSMcmjT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0df752c2d387a53dc187b2f0b1807ab6_JaffaCakes118
Files
-
0df752c2d387a53dc187b2f0b1807ab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac697dde28eb52e1124bd0a7e45b9c67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
lstrcpyA
lstrlenA
SetLastError
DeleteFileA
GetLastError
lstrcatA
ReadFile
SetFilePointer
CreateFileA
GetFileAttributesA
MultiByteToWideChar
GetModuleFileNameA
lstrcmpiA
GetWindowsDirectoryA
WinExec
GetVersionExA
SetUnhandledExceptionFilter
ReleaseMutex
GetCommandLineA
CreateDirectoryA
CreateMutexA
GetCurrentThreadId
HeapFree
HeapAlloc
GetProcessHeap
WriteFile
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetModuleHandleA
CloseHandle
SetStdHandle
IsBadCodePtr
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
GetFileSize
GetFileTime
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapReAlloc
GetStartupInfoA
GetTimeZoneInformation
GetACP
HeapSize
TerminateProcess
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
ole32
CoInitialize
CoUninitialize
CoCreateInstance
comctl32
ord17
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
comdlg32
GetFileTitleA
Sections
.text Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ