Static task
static1
Behavioral task
behavioral1
Sample
0eabbce22aeb273f4520050aeabfcfed_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0eabbce22aeb273f4520050aeabfcfed_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0eabbce22aeb273f4520050aeabfcfed_JaffaCakes118
-
Size
2.9MB
-
MD5
0eabbce22aeb273f4520050aeabfcfed
-
SHA1
b9f59783b9e22ab101479eef3024cf1cbb8c439d
-
SHA256
175d0e9cdd62c546a126e6e9ecf8102cf811a65c7ec3c447acfd5cbfa6fb58bd
-
SHA512
421225b10f04c929c459c87fc4b7a6b1a3ddce11904332629a14db9f6b40b66609438df28c4bf4a4554a30c8933962710fb1bbbf3101283f0201eb0f5606e489
-
SSDEEP
49152:YK/Z+NwDTL4Kr0HulTuxvKS0AgzPMbTdyvd35ed7xQ8Qv2vft:P/ZWwz4C0HulixNhgzsTdged7u8Qgft
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eabbce22aeb273f4520050aeabfcfed_JaffaCakes118
Files
-
0eabbce22aeb273f4520050aeabfcfed_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7b26c07829540c62a55d08e26f33b2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFileEx
SetFilePointer
ReadConsoleInputA
GetDriveTypeA
DeleteTimerQueueEx
VirtualAllocEx
ReadFileEx
GetCommandLineA
GetDllDirectoryA
VirtualQueryEx
WaitNamedPipeA
CloseHandle
GetThreadContext
WriteConsoleInputA
LocalHandle
SetFirmwareEnvironmentVariableA
VirtualUnlock
CreateTimerQueueTimer
EnumSystemCodePagesA
DeleteTimerQueueTimer
OpenEventA
GetEnvironmentStringsA
GetCommModemStatus
GetLocaleInfoA
HeapSize
SetConsoleTextAttribute
FlushConsoleInputBuffer
GetProfileSectionA
GetProcessVersion
GetCurrentDirectoryA
GetConsoleTitleA
GetLastError
GetProcAddress
GetTimeZoneInformation
OpenWaitableTimerA
WriteConsoleInputA
TransmitCommChar
RemoveDirectoryA
TerminateThread
VirtualProtect
EnumSystemCodePagesA
GetFileTime
IsProcessorFeaturePresent
Sleep
ws2_32
getpeername
Sections
.text Size: 742KB - Virtual size: 741KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE