Static task
static1
Behavioral task
behavioral1
Sample
030708cc79b673586b1bbcf94867af21_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
030708cc79b673586b1bbcf94867af21_JaffaCakes118
-
Size
746KB
-
MD5
030708cc79b673586b1bbcf94867af21
-
SHA1
d9e964fbf0de7873cade78560c11fb4a3f58e845
-
SHA256
795bf47336fb905ad38cc6840707f3225645b512edb3e4197f3cc4a6efe42ea2
-
SHA512
cc22fbda45d7bdd7dc0b79860f4d8a9d8ab3a779ffd334a02a3010d0beb8d57254a43391ace2cd0bc49d33aed5317e664760637064ef2ef7559e98cc580d9e74
-
SSDEEP
12288:EwysfNsEFj/DgwPAJhYYLPwoCK3HOS47xuvpAKm8jr4Xtem59LZ2h+MP2dBXqfor:Xyos2DgGAJhYYLYK3HQtl8XE9MYaY6fw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 030708cc79b673586b1bbcf94867af21_JaffaCakes118
Files
-
030708cc79b673586b1bbcf94867af21_JaffaCakes118.exe windows:5 windows x86 arch:x86
8979e10087a5e455c0d6690bf66635e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
LocalSize
GetModuleHandleA
ExitThread
FindVolumeClose
MapViewOfFile
FindClose
GetFileTime
GetDriveTypeA
GetModuleFileNameA
WaitForMultipleObjects
WriteFile
lstrlenA
GetCurrentDirectoryW
FindVolumeClose
HeapFree
GetFileType
IsBadReadPtr
EnterCriticalSection
HeapCreate
GetFileAttributesA
CloseHandle
SetFileAttributesW
CancelIo
GetCommandLineA
uxtheme
DrawThemeBackground
GetThemeTextExtent
IsThemeActive
OpenThemeData
GetWindowTheme
SetWindowTheme
CloseThemeData
GetThemeTextMetrics
CloseThemeData
GetThemeBool
GetThemeColor
GetThemeEnumValue
DrawThemeEdge
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 738KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE