Static task
static1
Behavioral task
behavioral1
Sample
0f68b0f09ee407a3695b88950541b6f0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f68b0f09ee407a3695b88950541b6f0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f68b0f09ee407a3695b88950541b6f0_JaffaCakes118
-
Size
544KB
-
MD5
0f68b0f09ee407a3695b88950541b6f0
-
SHA1
61da184fc81fb5cda5278694571ecaf6dbcc7691
-
SHA256
30ff23b8e5ceb75645a4300d516c58fc3689921ec5867cc7ea6ae81025cc78b0
-
SHA512
72e17cd2732e7886ad181bece18d288510fe576e1800ecdca3e2dc4f6e676b1c31df22edbba5dcbeb997ffbb40dabd61120952eef3183b9491bf8ccbf6eee2fa
-
SSDEEP
12288:aXrU9V5ujZUKfR2UmTCt6Ub9qXd/J5M3IEUVBoM:kY9zuCK52PUpqVJ5l7V+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f68b0f09ee407a3695b88950541b6f0_JaffaCakes118
Files
-
0f68b0f09ee407a3695b88950541b6f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e6aa5c6f5fc47eb62d8db7a0d7c66a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
SetEndOfFile
InterlockedDecrement
FindClose
VirtualFree
HeapCreate
InitializeCriticalSection
GetVersion
FreeLibrary
WaitForMultipleObjects
GetStringTypeW
GetSystemTimeAsFileTime
ReadFile
FindNextFileW
TlsFree
MapViewOfFile
RaiseException
InterlockedExchange
GetCurrentThread
GetProcAddress
FreeEnvironmentStringsW
GetCurrentProcess
GetFileSize
GetLocaleInfoA
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetFileAttributesW
FlushFileBuffers
VirtualProtect
HeapDestroy
LCMapStringA
SetEvent
WaitForSingleObject
GetModuleFileNameW
ReleaseMutex
LCMapStringW
EnterCriticalSection
GetStdHandle
HeapFree
GetLastError
HeapAlloc
GetProcessHeap
VirtualAlloc
ExitProcess
GetModuleHandleA
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
RtlUnwind
WriteFile
InterlockedIncrement
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
user32
DestroyWindow
EnableWindow
LoadIconA
LoadCursorA
SetTimer
InvalidateRect
GetDlgItem
CreateWindowExA
SendMessageA
TranslateMessage
DrawTextA
GetDC
SetWindowLongA
UpdateWindow
IsWindow
GetParent
ShowWindow
BeginPaint
SetFocus
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 484KB - Virtual size: 486KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ