Static task
static1
Behavioral task
behavioral1
Sample
0ceab0530c78a1e0ab5bffc9149aadd2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ceab0530c78a1e0ab5bffc9149aadd2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ceab0530c78a1e0ab5bffc9149aadd2_JaffaCakes118
-
Size
1.0MB
-
MD5
0ceab0530c78a1e0ab5bffc9149aadd2
-
SHA1
a60457927c37e55e7db21595b512007c9e0ff653
-
SHA256
d7adf5a3edf01d75e57d3c692e69192937cb6ab5a967d312ae2ced0da556bb3d
-
SHA512
2e92bf469eeb78018b158623ae093a79e5dce7eb6d2cb639b40b0ef265ff59efb33b70b168b84904730ee078d3b24181c684f4c11e1d21307373c9a0ef93c481
-
SSDEEP
24576:US5UiWTj+08ed0DA8+wCwKnNpAkBeqGyO/EPi:F5Xov8qzyFKEkAqO/6i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ceab0530c78a1e0ab5bffc9149aadd2_JaffaCakes118
Files
-
0ceab0530c78a1e0ab5bffc9149aadd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
c69667d53deca4c0b6a394051d572baf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
GlobalAlloc
msvcrt
_acmdln
_controlfp
_exit
rand
__getmainargs
_c_exit
__p__commode
__p__fmode
wcslen
__CxxFrameHandler
wcstoul
__setusermatherr
_initterm
_adjust_fdiv
_except_handler3
gdi32
GetObjectA
SetPixel
GetTextMetricsA
CreateSolidBrush
MoveToEx
PatBlt
LineTo
SetROP2
ExtTextOutA
DeleteObject
CreateCompatibleDC
GetTextColor
GetBkColor
user32
GetFocus
GetWindowRect
DefWindowProcA
ShowWindow
DispatchMessageA
ScreenToClient
LoadIconA
BeginPaint
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1018KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ