Static task
static1
Behavioral task
behavioral1
Sample
c0d896bceefcc023cb25f9904a0d54b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0d896bceefcc023cb25f9904a0d54b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0d896bceefcc023cb25f9904a0d54b2_JaffaCakes118
-
Size
32KB
-
MD5
c0d896bceefcc023cb25f9904a0d54b2
-
SHA1
f28df09b61c78f39161a7bf11e358a792b297e8b
-
SHA256
0e29b57639f3efe8f003931f791845ee3fcd81edeef2151f1411ae75207d1def
-
SHA512
dcd323575e4b5b1cf81fd3d63666d15336e083d0a1d77e21d3fe491f2205c84b1e7d32418ede1094d09806a1dff42edbbe2655743c264de5b1dca2f611d02649
-
SSDEEP
768:CNc0+6nn1nsu0gl8W/BdvN/hmvtUDJehlrodRF35r:o+6n1nsuscBtN/hOvrod75
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0d896bceefcc023cb25f9904a0d54b2_JaffaCakes118
Files
-
c0d896bceefcc023cb25f9904a0d54b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
492ead38a91e2f505704fc4f481962e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceLanguagesA
FreeResource
GetCurrentThreadId
GetFileAttributesA
GetFullPathNameA
GetProcAddress
GlobalFindAtomA
GlobalFlags
HeapAlloc
HeapCreate
HeapDestroy
IsBadReadPtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
SetEnvironmentVariableA
SetLastError
TlsAlloc
lstrcmpW
lstrcpynA
user32
WinHelpA
TranslateMessage
ModifyMenuA
IntersectRect
GetWindowPlacement
GetWindow
GetTopWindow
GetSubMenu
GetMenuCheckMarkDimensions
GetClientRect
GetCapture
CharUpperA
CallNextHookEx
BeginPaint
oleaut32
OleIconToCursor
OleLoadPicture
OleLoadPicturePath
OleTranslateColor
RegisterTypeLib
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCreate
SafeArrayDestroy
SetErrorInfo
SysReAllocString
SysStringLen
VarBstrCat
GetErrorInfo
ClearCustData
msvcrt
wcslen
wcscpy
wcscmp
vswprintf
time
strspn
sscanf
realloc
printf
malloc
fwprintf
fprintf
exit
_wcsicmp
_except_handler3
__set_app_type
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE