Static task
static1
Behavioral task
behavioral1
Sample
0f2457b06114494f05eb6d5edffdaa94_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f2457b06114494f05eb6d5edffdaa94_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f2457b06114494f05eb6d5edffdaa94_JaffaCakes118
-
Size
285KB
-
MD5
0f2457b06114494f05eb6d5edffdaa94
-
SHA1
bfd60f26cde476981b7e5ec1e761eb4b27742c62
-
SHA256
7fe6342dace39aca485b30643080fe0e953bec458607d8f84d89ca4cfef616ac
-
SHA512
7a60f1cb68a563ab2cc85b99ee362a2d6695240eac73b0610d004bc3295beb8d2b6cadf2e322cb3716304321a84878c430b0bb553a6f39bc4b23c75427c892fc
-
SSDEEP
6144:wGW26S+Do6oOOTPQsYTcn3J3H/17kjJgvhfaieCgK:10oaO8sYC53/1xlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f2457b06114494f05eb6d5edffdaa94_JaffaCakes118
Files
-
0f2457b06114494f05eb6d5edffdaa94_JaffaCakes118.exe windows:4 windows x86 arch:x86
72b81ddd2a2e078212810d78260ff888
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetTickCount
FindFirstChangeNotificationW
InterlockedDecrement
LoadResource
FreeResource
MultiByteToWideChar
GetFileAttributesW
WritePrivateProfileStringW
GlobalUnlock
FindClose
LoadLibraryW
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualFree
VirtualProtect
GetSystemTime
CreateThread
FindResourceW
GetPrivateProfileStringW
SetThreadPriority
TerminateThread
GetFileSize
SetEvent
SetFilePointer
MulDiv
GlobalAddAtomW
GlobalAlloc
MoveFileW
ExitProcess
Sleep
user32
DispatchMessageW
LoadBitmapW
UpdateWindow
DialogBoxParamW
AppendMenuW
LoadStringW
PostQuitMessage
LoadIconW
ReleaseDC
SetWindowTextW
SetCursorPos
GetKeyState
TranslateMessage
SetForegroundWindow
IsWindow
LoadCursorW
EndDialog
SetDlgItemTextW
gdi32
SetDIBits
GetDeviceCaps
CreateRoundRectRgn
CreateCompatibleBitmap
CreateBitmap
GetMapMode
LineTo
CreateICW
advapi32
RegCreateKeyExW
LookupAccountSidW
RegNotifyChangeKeyValue
InitializeSecurityDescriptor
GetUserNameW
ole32
CoInitializeEx
oleaut32
SysFreeString
Sections
.text Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE