Static task
static1
Behavioral task
behavioral1
Sample
0292fbdf65505a42507e012207aa5e7b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0292fbdf65505a42507e012207aa5e7b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0292fbdf65505a42507e012207aa5e7b_JaffaCakes118
-
Size
84KB
-
MD5
0292fbdf65505a42507e012207aa5e7b
-
SHA1
2b8579897dd6b3ed09d7a5be6c16c27277552a3c
-
SHA256
90ba202a0f9ed1e44a924bd73a16a8730971590d55840fb22595193c85e7a371
-
SHA512
21b1c576981b7c8ad1da2c2c21a8f6fee86f8cc5df9bcebebb15447a1dc1a8d55e3c203b93ee1ab2f32d848a38e340e902813fe474c424337928f31b3ac66c87
-
SSDEEP
1536:+eAfrozJKvVUmclMkpnRR5MjG0MahtZ6wsQI9+/ccSFoJhVWolYoxDtp:+ejkUmclMknRejG0MUtcQI80HAh4olYq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0292fbdf65505a42507e012207aa5e7b_JaffaCakes118
Files
-
0292fbdf65505a42507e012207aa5e7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9fd48a789a04cfe00da367663f813a6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LockResource
lstrcmpiA
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetVersion
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
VirtualAlloc
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
DeviceIoControl
QueryPerformanceCounter
FindResourceA
LoadResource
TlsAlloc
GetACP
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetStringTypeW
user32
LoadCursorA
EndPaint
BeginPaint
wsprintfA
GetSysColor
DrawTextA
GetClientRect
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
FindWindowA
DispatchMessageA
LoadIconA
RegisterClassExA
PostQuitMessage
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
DestroyWindow
gdi32
CreateBitmap
TextOutA
Rectangle
advapi32
RegSetValueExW
RegOpenKeyExA
RegCloseKey
ole32
CoInitialize
CoTaskMemAlloc
shlwapi
PathFileExistsA
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ