Static task
static1
Behavioral task
behavioral1
Sample
cfb1d9d71f0636e32ed90b9017d1f0e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfb1d9d71f0636e32ed90b9017d1f0e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfb1d9d71f0636e32ed90b9017d1f0e5_JaffaCakes118
-
Size
101KB
-
MD5
cfb1d9d71f0636e32ed90b9017d1f0e5
-
SHA1
15b270ffd89a8913754d7c0a1766822d2e5bf8c0
-
SHA256
ca7d68f3da5a0044b33c16a16612edda0598731de24bc2b28fc7f6c78cff839e
-
SHA512
402bab1f82832e5dc0001255b4316cf396536739d7be6b1a91c5c6af71d7f483f7e6949d2de9b01df1be49b77431a029058fd047ac406c03aa76612b08f74c9e
-
SSDEEP
768:lBDjwxDqSYnropN/FLY2DPrNjXWFm5C00sWBlH1bmbxz1ZJ0YWRlnx/PBJQ5:lRtSYo/F82DPr5w89ZeNmbJAnx/w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfb1d9d71f0636e32ed90b9017d1f0e5_JaffaCakes118
Files
-
cfb1d9d71f0636e32ed90b9017d1f0e5_JaffaCakes118.exe windows:1 windows x86 arch:x86
890dd996c9f4a13c314e6304fb3af536
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
lstrcpyW
lstrcmpiW
GetVersionExA
FormatMessageW
QueryPerformanceCounter
HeapFree
SetLastError
InterlockedDecrement
lstrcpyW
CreateThread
FreeLibrary
VirtualAlloc
LoadLibraryW
WriteFile
WaitForSingleObject
InterlockedIncrement
GetCommandLineA
CreateFileW
GetTickCount
GetCommandLineA
LoadLibraryW
GetModuleHandleA
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
Sections
.ukwq Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nmsc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kcmp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pmks Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwlb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yugb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvyy Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wimb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btid Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE