Static task
static1
Behavioral task
behavioral1
Sample
0eba71144bcc9eefa868e1083b5a2545_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0eba71144bcc9eefa868e1083b5a2545_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0eba71144bcc9eefa868e1083b5a2545_JaffaCakes118
-
Size
93KB
-
MD5
0eba71144bcc9eefa868e1083b5a2545
-
SHA1
7cc7a3f5b8f0854f03b992c542a0769e4664866d
-
SHA256
ac7edcd3b83d4b32e2f79017284ce17dfc9a1e37375840fad950cdb0d267f8ac
-
SHA512
bf9d958a3e078904e5289cd7df6e86356a022d4c7033f90ba4f015f9209d1d432d3a93aed588221209f8c89d2ea6c9bb313d0eb5f6d0dc5de82ece6ad26e6f6a
-
SSDEEP
1536:q3qgVJjz6YSfzFiLiImBkUahf10+RLq10XjJ9Etcl/9uYfl6ZEpwCrsqa15:q3HaImBWhf9TEal/Lfl6eGysN15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eba71144bcc9eefa868e1083b5a2545_JaffaCakes118
Files
-
0eba71144bcc9eefa868e1083b5a2545_JaffaCakes118.exe windows:1 windows x86 arch:x86
3ffd6f543f205d50e392952a152130a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
FlushInstructionCache
FreeLibrary
GetCurrentProcess
GetSystemDirectoryA
lstrcmpiA
VirtualProtect
WriteProcessMemory
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
MessageBoxA
SendMessageA
SetWindowTextA
KillTimer
SetTimer
SetWindowsHookExA
UnhookWindowsHookEx
comctl32
InitCommonControls
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE