Static task
static1
Behavioral task
behavioral1
Sample
0f90b9ec6aaefee40f48a0f9035863d8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f90b9ec6aaefee40f48a0f9035863d8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f90b9ec6aaefee40f48a0f9035863d8_JaffaCakes118
-
Size
10KB
-
MD5
0f90b9ec6aaefee40f48a0f9035863d8
-
SHA1
73fea3b814b4ac426ae3e3de602a2d99dc0e2010
-
SHA256
496314a9bc141f7c690570045fdb16fbb7919362b63be14701392628cff8c40e
-
SHA512
9c4e3835daa19078f1e2c04901f637545e5fb7dd29ae48aff06e193051ca0b316f9bf7d95f34435dce7c7e7cb8d6cafae62d1122d7d493a17f03edc5a82a3a98
-
SSDEEP
192:pqDWaPYHqmG6DSyeEPEzvvZNofVluLjl5dSJEtxUI2X7+icErKzUW:pq6aPYHqmG6DSyeEszT4luLTaEMSuriJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f90b9ec6aaefee40f48a0f9035863d8_JaffaCakes118
Files
-
0f90b9ec6aaefee40f48a0f9035863d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
0b4d44ab6401c61ac6c5ede54541b51c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassExA
CharUpperBuffA
RegisterClassA
DefDlgProcA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadIconA
EnableWindow
SetWindowTextA
DefWindowProcA
PostQuitMessage
kernel32
GetStartupInfoA
GetCommandLineA
SetEvent
GetModuleHandleA
CreateThread
lstrcmpiA
EnterCriticalSection
ResetEvent
LeaveCriticalSection
WaitForMultipleObjects
GetTickCount
GetProcessHeap
HeapAlloc
InitializeCriticalSection
CreateEventA
lstrcpyA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
lstrlenA
lstrcmpA
rasapi32
RasSetEntryPropertiesA
RasEnumEntriesA
RasGetEntryPropertiesA
RasDialA
RasEnumDevicesA
RasHangUpA
RasEnumConnectionsA
RasGetConnectStatusA
RasGetErrorStringA
comctl32
ord17
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE