Static task
static1
Behavioral task
behavioral1
Sample
f0bb2e94075f12537df40fb3c6cba1e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0bb2e94075f12537df40fb3c6cba1e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0bb2e94075f12537df40fb3c6cba1e6_JaffaCakes118
-
Size
54KB
-
MD5
f0bb2e94075f12537df40fb3c6cba1e6
-
SHA1
b9c7ee062f8a7c39a947995b71491181c97f0948
-
SHA256
427d04137eb7b62b1aa8f7de0b454ac1fe5e4643f80be971f1afb4c7da08b32f
-
SHA512
0bf864fd663c4aaf47e7c1a375f58fa5e0fcad7d18724de6cd937e5c0a384c1e56ff91e0634b4ceef569f889f84f03a7ce323ebbd77327129e2c85e93aca9f8f
-
SSDEEP
1536:2Av7/GgN5VfqmAZ8Mhl8JWz6NGGtIYMsO1+8r:2G7egNCmmuWcG+Ks
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0bb2e94075f12537df40fb3c6cba1e6_JaffaCakes118
Files
-
f0bb2e94075f12537df40fb3c6cba1e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2f0cf989a0597532dc45538eb21893d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
CreateRemoteThread
DisableThreadLibraryCalls
ExitProcess
GetAtomNameA
GetConsoleCP
GetProcessShutdownParameters
GlobalGetAtomNameA
HeapCreate
ReadProcessMemory
SetConsoleCP
SetThreadPriority
TlsGetValue
UpdateResourceW
_lwrite
advapi32
AddAccessDeniedAce
BuildExplicitAccessWithNameW
ConvertSecurityDescriptorToAccessNamedW
CryptEnumProvidersA
GetAclInformation
GetCurrentHwProfileA
GetEffectiveRightsFromAclA
GetSecurityInfo
InitializeAcl
OpenBackupEventLogA
OpenSCManagerA
PrivilegeCheck
RegOpenKeyA
RegSaveKeyA
RegSetKeySecurity
user32
CreateDialogParamA
DlgDirListA
DrawTextExA
EnumPropsExW
GetWindowTextA
InsertMenuA
LoadCursorFromFileW
PostMessageW
SetLogonNotifyWindow
gdi32
CloseMetaFile
CreateRectRgnIndirect
EnableEUDC
EnumObjects
Escape
GetCharWidth32A
GetGlyphOutline
GetTextMetricsW
PolyPolygon
PolylineTo
Rectangle
SetDIBColorTable
SetMapperFlags
StretchBlt
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE