Static task
static1
Behavioral task
behavioral1
Sample
0408672fa2f7049075aff1908149810f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0408672fa2f7049075aff1908149810f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0408672fa2f7049075aff1908149810f_JaffaCakes118
-
Size
818KB
-
MD5
0408672fa2f7049075aff1908149810f
-
SHA1
c8b200301d8f26d992aa3cc668a82de36799afcb
-
SHA256
12aee1c61586478ed9279e7fdfe6ec235fd286639bd16469ff93563e77fae3ba
-
SHA512
ef460c3875979dd281bc7b526b0e77b0eac5831b6a9690f6d7cb8363f5c3053f086f0d260c2b391bb75ccf12ff3ce5daa5c11441c298ff2f1546908152f64636
-
SSDEEP
24576:xBsZo0tPOSpzPTQqnYKNAzvFStR463TkQ:xqZZOSpzPvZa8H4IgQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0408672fa2f7049075aff1908149810f_JaffaCakes118
Files
-
0408672fa2f7049075aff1908149810f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2cd095d7940715945ee560fed1d49df1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
OpenMutexW
WriteFile
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetVolumeInformationA
Heap32First
lstrcpynA
ReadConsoleA
SetThreadPriority
GetCurrentThreadId
GetModuleHandleA
lstrcpynA
lstrcmpW
lstrcpynA
lstrcatA
GetDiskFreeSpaceW
VirtualFree
GetPrivateProfileIntA
FindFirstVolumeA
GetDriveTypeA
GetSystemTime
lstrcpynA
VirtualProtectEx
GetFileType
GetCurrentDirectoryA
cmdial32
AutoDialFunc
InetDialHandler
RasCustomDial
RasCustomDialDlg
Sections
.text Size: 18KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ