Static task
static1
Behavioral task
behavioral1
Sample
14940bc13c2d1c7848add7a139b0d925_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14940bc13c2d1c7848add7a139b0d925_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14940bc13c2d1c7848add7a139b0d925_JaffaCakes118
-
Size
193KB
-
MD5
14940bc13c2d1c7848add7a139b0d925
-
SHA1
cbfd250296369f09d4292e3cfa6c17f40d8bb813
-
SHA256
86d6ae9eb97e27cbf823773e13c6ac8a659cb4911a2c5edf5746babee7dc552a
-
SHA512
91b7c0e93ac982f1da28e51c19e496f01b4dcdb26ea0a974979ffe5075e79ba3c763a091e34da4643a7ea3a114e923d486c9454789977760441343c6d5c12b17
-
SSDEEP
6144:11fYzhCBQTA7ztu2lVAuJ6kagVvSizrJd8xSUU0:11QzhCjb7AWxx4izNd8xSV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14940bc13c2d1c7848add7a139b0d925_JaffaCakes118
Files
-
14940bc13c2d1c7848add7a139b0d925_JaffaCakes118.exe windows:4 windows x86 arch:x86
084f98136af6aeb0fe131712ce4dab44
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipCloneImage
ole32
OleTranslateAccelerator
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
winmm
timeGetTime
timeSetEvent
kernel32
QueryMemoryResourceNotification
GetFileType
WriteConsoleW
GetCommandLineA
HeapFree
InterlockedIncrement
HeapFree
GetVersionExW
GetStringTypeW
UnhandledExceptionFilter
GetVersionExA
ExitThread
CreateFileA
GetVersionExA
GetStartupInfoA
WriteConsoleW
EnumResourceTypesW
HeapAlloc
GetConsoleMode
GetProcessHeap
GetPrivateProfileSectionNamesA
GetEnvironmentVariableW
GetStringTypeA
CreateFileMappingA
UnmapViewOfFile
FlushFileBuffers
GetLocaleInfoA
QueryPerformanceCounter
HeapAlloc
GetConsoleCP
MapViewOfFile
GetFullPathNameW
GetStdHandle
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ