Static task
static1
Behavioral task
behavioral1
Sample
c07e4e156b26be3bde18aa370df84e93_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c07e4e156b26be3bde18aa370df84e93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c07e4e156b26be3bde18aa370df84e93_JaffaCakes118
-
Size
265KB
-
MD5
c07e4e156b26be3bde18aa370df84e93
-
SHA1
0664c7fc633afdc89ce8d58b570c6f852a836bbe
-
SHA256
d07398b64a79682ac98e2d3eb3b5a2c7265655f8a12e73a66b5300131131b004
-
SHA512
7c1a9d30c209a42cbc1ff7c7f1f78c09b2f6c7d3613329aaf4998226193df9d7b29158cb09bf625d2a94db2b9e035cd45a8330fff3f13487700967065c5ae0d0
-
SSDEEP
6144:FQcwcnUZ605JwCeamiJwtny5McU6f0dEXYjbRJFE:FLUZdJeamgwtny2H6fQcObTFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c07e4e156b26be3bde18aa370df84e93_JaffaCakes118
Files
-
c07e4e156b26be3bde18aa370df84e93_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d0afc5ac70114a7828121eebf916a06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
newdev
UpdateDriverForPlugAndPlayDevicesW
shell32
SHGetFolderPathW
oleacc
LresultFromObject
AccessibleObjectFromPoint
kernel32
UnhandledExceptionFilter
HeapDestroy
GetTickCount
VirtualAlloc
HeapFree
GetCurrentProcess
GetCPInfo
WriteConsoleA
GetOEMCP
LeaveCriticalSection
InitializeCriticalSection
GetCurrentProcessId
WriteFile
VirtualFree
CompareStringA
SetStdHandle
HeapCreate
ReadFile
SetUnhandledExceptionFilter
GetACP
SetEndOfFile
HeapSize
GetDateFormatA
SetEnvironmentVariableA
EnumSystemLanguageGroupsW
TerminateProcess
GetSystemTimeAsFileTime
SetFilePointer
GetTimeFormatA
IsValidCodePage
FreeLibrary
EnterCriticalSection
MultiByteToWideChar
GetTimeZoneInformation
GetConsoleOutputCP
ResetWriteWatch
IsDebuggerPresent
HeapReAlloc
RaiseException
LCMapStringW
GetStringTypeW
RtlUnwind
LCMapStringA
GetLocaleInfoA
LoadLibraryA
CompareStringW
QueryPerformanceCounter
GetStringTypeA
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ