Static task
static1
Behavioral task
behavioral1
Sample
62ad61f1cd8a3b9f63e1fd86b303c768_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62ad61f1cd8a3b9f63e1fd86b303c768_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62ad61f1cd8a3b9f63e1fd86b303c768_JaffaCakes118
-
Size
176KB
-
MD5
62ad61f1cd8a3b9f63e1fd86b303c768
-
SHA1
b0861a8d2215c2037f941ee30381310ef9f904c2
-
SHA256
c161eec13eaf85e7c7a15daf5d9b85b73a19c13adbea96e09e42e50e05db1ac1
-
SHA512
693d2390aacc11579d4a50d732e6c79a27b8f6e3dd537f72dd1dd0fed7bb93c87b47d70f1588746e6b492767ce9f6cf19e42a5773d8aea54367b6bd44f1fe6af
-
SSDEEP
3072:upMlNPPG3GRfo8RKjhzGBqOYcYZlDd8FdymUvuFWVAsiLYmFsL5+/aGw8R2KGU:upYNOWRg8UtGbY/iFdLUvuFuBoRGW2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62ad61f1cd8a3b9f63e1fd86b303c768_JaffaCakes118
Files
-
62ad61f1cd8a3b9f63e1fd86b303c768_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa64a63959d63dd286a1416a17d0347e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
shlwapi
PathFileExistsA
PathFileExistsW
StrStrIW
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
LoadLibraryExW
lstrcpynW
GetCalendarInfoW
LoadLibraryW
GetStdHandle
GetModuleHandleA
CloseHandle
SystemTimeToFileTime
HeapDestroy
LockResource
WriteFile
HeapAlloc
EnumResourceNamesA
LeaveCriticalSection
FindFirstFileW
SizeofResource
FindResourceExA
GetProcessHeap
GetVersionExA
LoadResource
GetSystemTime
HeapFree
FindResourceA
CreateFileW
TerminateProcess
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ