Static task
static1
Behavioral task
behavioral1
Sample
c08966ef7e518952d52a9eec8487a423_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c08966ef7e518952d52a9eec8487a423_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c08966ef7e518952d52a9eec8487a423_JaffaCakes118
-
Size
114KB
-
MD5
c08966ef7e518952d52a9eec8487a423
-
SHA1
302dbdd5726c68cdd4b410eace745d7b636191e5
-
SHA256
a6b39726af6fb918d8ca1442220cc1b258dd2a00250f8d8de56ed6602cebb3f6
-
SHA512
b44dee5cfc12597116312f92c1f9519988f21d6baa569bd99b4dfeea22263959e53bc4938ab9132756093a2e94ac556c8cfc62b84d8f75f0c1c42711ea24926c
-
SSDEEP
768:2HoeSPe0XVbquASQbyGFmQJm5Su2BrcqRP+O6NYxNcQ3ZfQGsIQX:2K/uuA6GFmcFBrPRWOTx6QJBs5X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c08966ef7e518952d52a9eec8487a423_JaffaCakes118
Files
-
c08966ef7e518952d52a9eec8487a423_JaffaCakes118.exe windows:1 windows x86 arch:x86
995a0daad168a4dbe07e0393f71feae6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
lstrcmpiW
GetStartupInfoA
VirtualFree
HeapAlloc
LeaveCriticalSection
UnhandledExceptionFilter
GetTickCount
Sleep
InitializeCriticalSection
GetCommandLineA
ExitProcess
WaitForSingleObject
HeapDestroy
CloseHandle
GetProcessHeap
InterlockedDecrement
lstrlenW
WideCharToMultiByte
UnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
GetStartupInfoW
lstrcpyW
GetCurrentProcessId
Sections
.qoig Size: 102KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vgox Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sufg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ikxu Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oraj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aoef Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mnau Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raef Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqlv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE