Static task
static1
Behavioral task
behavioral1
Sample
8d0cf463f2605f3a63b5e78f7362be12_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d0cf463f2605f3a63b5e78f7362be12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d0cf463f2605f3a63b5e78f7362be12_JaffaCakes118
-
Size
359KB
-
MD5
8d0cf463f2605f3a63b5e78f7362be12
-
SHA1
7d9556bb1c4c8311cb12d0acc0ffa37b461b1281
-
SHA256
a7513aa18db99aa36dda62f547c9118f4b1d5f42a2cb8222d446348b9f610cb9
-
SHA512
b7a7171ec302e73855b6a084acc2a3d2cc1e2dd11c335951e2749a3af8c7bdc49166ba6b79907cab74a22c449152ac0b2a1c884413995187631b99133504835b
-
SSDEEP
6144:NnQHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:NQR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d0cf463f2605f3a63b5e78f7362be12_JaffaCakes118
Files
-
8d0cf463f2605f3a63b5e78f7362be12_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0b2f74bef2923b9eb5a6fef5b4f15fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
lstrlenA
CreateFileA
GetCommandLineW
GetDriveTypeA
ExitProcess
CloseHandle
GetComputerNameW
GetModuleHandleW
LocalFree
GetFileAttributesA
HeapCreate
GetSystemTime
LoadLibraryA
GetTickCount
GetDiskFreeSpaceW
GetTickCount
ReleaseMutex
FindAtomW
ReleaseMutex
user32
CloseWindow
CreateWindowExA
DrawStateA
GetMenu
CallWindowProcA
DestroyCaret
FillRect
GetCaretPos
GetClassInfoA
GetDlgItem
EndDialog
DispatchMessageA
GetComboBoxInfo
rasapi32
RasDialA
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
DwCloneEntry
modemui
CountryRunOnce
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ