Static task
static1
Behavioral task
behavioral1
Sample
0efb497d4cb946ad82051a05d2229e72_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0efb497d4cb946ad82051a05d2229e72_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0efb497d4cb946ad82051a05d2229e72_JaffaCakes118
-
Size
50KB
-
MD5
0efb497d4cb946ad82051a05d2229e72
-
SHA1
4a74adccdea942dac99b7c6a9543aac07c8f1b13
-
SHA256
6b59bd2a865bfa24e7450e557c6822d45c64c9a94652d310be20a40883d47123
-
SHA512
3e63275c0443a443df7e0f673377152cc66f256668b925b6aa89a251a1ac85a0c69125afdabec19a08ceb20b2f19bc9a4d25f35d464fd5ebc67a9750bedc85eb
-
SSDEEP
768:S/+jyWmvnTuNEe8MLmeR4+aOur53LAvcd8knPnj19+ogU/T02uwEuhsoobQkaF:vjyWGqN1jqSJ4ZE219/5sH8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0efb497d4cb946ad82051a05d2229e72_JaffaCakes118
Files
-
0efb497d4cb946ad82051a05d2229e72_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bc3dafa39ee91a838e90cb7dfa6f8da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
UnmapViewOfFile
ExitProcess
GetLastError
CreateMutexA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
CloseHandle
GetFileSize
CreateFileA
GetTempPathA
GetLocalTime
GlobalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcatA
GlobalAlloc
GetCommandLineA
SetFileAttributesA
CopyFileA
MoveFileA
GetTempFileNameA
FindClose
FindNextFileA
DeleteFileA
lstrcpyA
FindFirstFileA
lstrlenA
MapViewOfFile
CreateFileMappingA
SetFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetDriveTypeA
Sleep
GetLogicalDriveStringsA
WriteProcessMemory
ReadProcessMemory
GetCurrentProcess
GetModuleHandleA
Sections
.text Size: 6KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ