Static task
static1
Behavioral task
behavioral1
Sample
0e8623af5c2a207bb64f8b73281dfc58_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e8623af5c2a207bb64f8b73281dfc58_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0e8623af5c2a207bb64f8b73281dfc58_JaffaCakes118
-
Size
271KB
-
MD5
0e8623af5c2a207bb64f8b73281dfc58
-
SHA1
bf95b139f0c71886c37458f23de262f113f53d07
-
SHA256
d6944484a7c809917dcde9961241f91c302d844ecdf939912004ffcb4c29c5fc
-
SHA512
1c9adbd4f9093abb65b77b8e4ba63118183b82319375431a386d50ac4b59ccd7068f14d793f2b9bc404182670e323ed800da0a2fc3185520eefaf2b4d3c079d0
-
SSDEEP
6144:sguJ1x2TCiqsue1D/xyV/JjVCsP+k7DuntNMn:UJ1x2TCiq1e1D/xyV/lfX6tNM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8623af5c2a207bb64f8b73281dfc58_JaffaCakes118
Files
-
0e8623af5c2a207bb64f8b73281dfc58_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e374d2cbfefed7daaf8737c08a3a2d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetProfileIntA
GetProfileStringA
CloseHandle
GetVolumePathNameA
CreateMailslotA
FindAtomA
GetOEMCP
LocalHandle
GetModuleHandleA
EnterCriticalSection
CreateJobSet
EnumDateFormatsA
ExitProcess
GlobalLock
GetStdHandle
GetProcessHeap
VirtualAlloc
GetTapeStatus
GlobalFlags
GlobalFree
user32
ReleaseDC
GetClassNameA
GetParent
BeginPaint
ShowWindow
EndPaint
CloseWindow
GetWindowTextA
GetClassInfoExA
GetForegroundWindow
IsIconic
RegisterClassA
GetActiveWindow
GetWindow
GetDC
DrawEdge
GetWindowTextLengthA
ValidateRect
GetFocus
gdi32
CreateDIBitmap
GetCharWidthA
ExtCreatePen
CreateDCA
GetColorSpace
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ