Static task
static1
Behavioral task
behavioral1
Sample
0031339d89960fbacd56b23bbe2b1bf3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0031339d89960fbacd56b23bbe2b1bf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0031339d89960fbacd56b23bbe2b1bf3_JaffaCakes118
-
Size
290KB
-
MD5
0031339d89960fbacd56b23bbe2b1bf3
-
SHA1
40f04e9d3f25794e42673e93227f3a76841531e3
-
SHA256
af95a951c76c66a32ed9ff1aae93259cc4aa73c5d8c3a6d96bdeb62a43260646
-
SHA512
23d5db3c592328471597bbde73d33ad7f016f87fbdb18842a8f32dbe635c94f6bfeb129152a3ad861f63babc11a1d29fe1e349eab17eb7755ccffe153b353ab1
-
SSDEEP
6144:bbrptm16+nJqid8yLTwxV4QyG6JVpdutSiSxnxD:bbrptmwq1dN+N6rpdOSiSxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0031339d89960fbacd56b23bbe2b1bf3_JaffaCakes118
Files
-
0031339d89960fbacd56b23bbe2b1bf3_JaffaCakes118.exe windows:5 windows x86 arch:x86
03d30f4d0edc6668cc2374075962a9e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
DeleteCriticalSection
UnhandledExceptionFilter
ReleaseSemaphore
CreateThread
IsDebuggerPresent
LeaveCriticalSection
VirtualProtectEx
ReadProcessMemory
ResumeThread
SetThreadPriority
OpenProcess
GetShortPathNameW
FreeLibrary
FindFirstFileW
EnterCriticalSection
GetSystemTime
WaitForSingleObject
GetDriveTypeW
GetSystemTimeAsFileTime
CreateFileW
FindClose
CreateDirectoryW
GetFileSize
CreateSemaphoreA
GetCurrentThreadId
SystemTimeToFileTime
SetUnhandledExceptionFilter
CloseHandle
FindNextFileW
GetExitCodeThread
VirtualAlloc
psapi
GetProcessMemoryInfo
ole32
CoCreateInstance
CoUninitialize
StgOpenStorageEx
CoInitializeEx
CoTaskMemFree
StgCreateStorageEx
CoInitialize
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
userenv
GetUserProfileDirectoryW
esent
JetCreateIndex
JetDelete
JetUnregisterCallback
JetTerm2
JetCreateTableColumnIndex2
JetRestore
JetRegisterCallback
JetGetCurrentIndex
JetCreateInstance
JetEndExternalBackupInstance
JetCreateTable
JetPrepareToCommitTransaction
JetAttachDatabaseWithStreaming
msctfp
GetProxyDllInfo
DllGetClassObject
DllUnregisterServer
DllRegisterServer
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohhopzz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE