Static task
static1
Behavioral task
behavioral1
Sample
c0c04d1bb1b6be4b9e44c4d2c704dbfe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0c04d1bb1b6be4b9e44c4d2c704dbfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0c04d1bb1b6be4b9e44c4d2c704dbfe_JaffaCakes118
-
Size
96KB
-
MD5
c0c04d1bb1b6be4b9e44c4d2c704dbfe
-
SHA1
68615855a841b8c5116ef32c8664d25628d6ee96
-
SHA256
956929c5d42f44d8cb36442040606f6f0c9c03bae3e50bdd470b0474336b92c3
-
SHA512
9157c3331a3078751a216c8b82b7a7ffe4cd0da1e5a63311bcd58f648c101cec3a7b53c5d186b913e4dded2a0a91c867d3ea0de865db5acbfb6a6ce2a240a0e1
-
SSDEEP
1536:6XsDXXlWI05KaWCzjqfe6+dh0PZDLjGRLcHXopQWjxvZWbCxhGjhyLC:C0F2KFCzOm6+dh0RDGRLKXGVZW2YMu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0c04d1bb1b6be4b9e44c4d2c704dbfe_JaffaCakes118
Files
-
c0c04d1bb1b6be4b9e44c4d2c704dbfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c4359e66a8707236d15b9648165540c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
SleepEx
CreateProcessA
GetStartupInfoW
GetSystemTime
WriteProcessMemory
WaitForSingleObject
CreateFileA
ReadFile
WaitForSingleObject
GetProcAddress
LoadLibraryA
VirtualProtect
GetCurrentThread
SetThreadContext
SetConsoleCP
SetConsoleCP
GetLastError
ReadFile
DeviceIoControl
LoadLibraryExA
Sleep
LoadLibraryA
DeviceIoControl
GetSystemTimeAsFileTime
GetSystemTime
CreateProcessA
ReleaseMutex
winmm
GetDriverModuleHandle
timeGetDevCaps
DrvGetModuleHandle
GetDriverModuleHandle
timeGetDevCaps
DrvGetModuleHandle
DrvGetModuleHandle
OpenDriver
OpenDriver
OpenDriver
waveOutReset
timeGetDevCaps
OpenDriver
DrvGetModuleHandle
DrvGetModuleHandle
GetDriverModuleHandle
timeGetDevCaps
GetDriverModuleHandle
GetDriverModuleHandle
DrvGetModuleHandle
Sections
.text Size: 82KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BitDef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ