Static task
static1
Behavioral task
behavioral1
Sample
0f8d767c70fc2eb7cad881395e2b1be5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f8d767c70fc2eb7cad881395e2b1be5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f8d767c70fc2eb7cad881395e2b1be5_JaffaCakes118
-
Size
340KB
-
MD5
0f8d767c70fc2eb7cad881395e2b1be5
-
SHA1
68dff93fe7077689c374123b070d1a989c7bdfe0
-
SHA256
d056cb674c06de4f06591140c3bb1a7add3b4dcd7af46555fe5d0ee0c94102e9
-
SHA512
acbb4dbe9038a2beb3c676f20d35a5daef051f6dcee553a02f8748bca69f3ea24636e80bc066b2773724ad33dc7de5daade7758a00e70767cfe6a8ee2f4845a4
-
SSDEEP
6144:OtzdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4PydyQrL:+1tUM5aV/oLOVfhaa9ZpV6EL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8d767c70fc2eb7cad881395e2b1be5_JaffaCakes118
Files
-
0f8d767c70fc2eb7cad881395e2b1be5_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab81c8dda1e180994cad8a64afd7bc33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GlobalUnlock
lstrlenA
GetConsoleCP
CreateEventA
MapViewOfFile
GetModuleHandleA
GetDriveTypeA
GetStdHandle
FindClose
FreeEnvironmentStringsA
GlobalLock
CloseHandle
HeapCreate
CreateFileA
GetACP
LocalFree
GetLastError
IsBadReadPtr
DeleteTimerQueue
user32
GetDlgItemTextA
GetDlgItem
ClipCursor
CreateWindowExA
GetMessageA
SetFocus
RedrawWindow
IsMenu
GetParent
CheckMenuItem
GetSubMenu
EndDialog
DialogBoxParamA
DrawIconEx
apphelp
ApphelpCheckIME
SdbCloseDatabase
ApphelpShowDialog
SdbFindFirstTag
ApphelpCheckRunApp
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ