Static task
static1
Behavioral task
behavioral1
Sample
ef61189d58b4293c16e7b06eb1d29766_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef61189d58b4293c16e7b06eb1d29766_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef61189d58b4293c16e7b06eb1d29766_JaffaCakes118
-
Size
230KB
-
MD5
ef61189d58b4293c16e7b06eb1d29766
-
SHA1
747d3025a6309e20b8e90add91a3e228761cff69
-
SHA256
1efc29d5bc40258a837ce14b9dc06feffb07b7642e5cec62039bf26378c1e5ff
-
SHA512
52c36c88b6f66b736a6787f4eceb381d7555ebbd8b8d995bb4ba1d189a5c80d8bba65867e453a8569e6217ff4163cdcb283a174d52509d08a1a2c983239ad07a
-
SSDEEP
6144:Cf+B0T0OumokA2eedqjOA3knrj0nV9ONhvsoAfeae:CZTIkAFeGj3kvSV9ONJ02ae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef61189d58b4293c16e7b06eb1d29766_JaffaCakes118
Files
-
ef61189d58b4293c16e7b06eb1d29766_JaffaCakes118.exe windows:4 windows x86 arch:x86
548834068685b7ec6fc889bbf8f0a586
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
GetCurrentProcessId
QueryPerformanceCounter
GetConsoleAliasesW
GetCurrentProcess
GetModuleHandleA
InterlockedDecrement
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LocalFree
GetLastError
CreateMutexW
LocalAlloc
OpenMutexW
WaitForSingleObject
ResetEvent
CloseHandle
SetEvent
ReleaseMutex
FindClose
FindFirstFileW
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
oleaut32
DispGetIDsOfNames
CreateErrorInfo
SafeArraySetIID
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
user32
DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC
shell32
ShellExecuteExW
SHAppBarMessage
Shell_NotifyIconW
FindExecutableW
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_stricmp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
Sections
.text Size: 129KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE