Static task
static1
Behavioral task
behavioral1
Sample
0cf0ee7501b55b09c239a49d8bb680cf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cf0ee7501b55b09c239a49d8bb680cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cf0ee7501b55b09c239a49d8bb680cf_JaffaCakes118
-
Size
49KB
-
MD5
0cf0ee7501b55b09c239a49d8bb680cf
-
SHA1
54dd3ed843bdbccedf74010e4dd0605182c97d86
-
SHA256
dd3e01e3d01a979727fd207323bd469336f9a4a7d7fa1c2c7aaf76e2e0530ab5
-
SHA512
59fdacf62683aebb360caf95eeadc94e6708bdc4dad4abfea859a761a8d6a424f3d95d91fbebfac6f1725adc3ea1ee057cb4a3fece00f9185c326020c05dd108
-
SSDEEP
768:TTZLC68/I1raxwuscsPvkkfasOd7Ks9BTk9ADQ+eykg2qCXQM3iJcmPm:TtCeWxVscs35fK7Ks9BTk+0+eH58Pm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf0ee7501b55b09c239a49d8bb680cf_JaffaCakes118
Files
-
0cf0ee7501b55b09c239a49d8bb680cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
34a3fb853bb0ef20864d200d8d263290
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
DialogBoxParamA
LoadIconA
ArrangeIconicWindows
CharUpperA
GetClassLongA
IsIconic
SetFocus
CharNextA
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
ShowWindow
LoadCursorA
UpdateWindow
EnableWindow
SetCursorPos
CharLowerA
GetSysColorBrush
SetTimer
GetMessagePos
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
GetParent
kernel32
GlobalDeleteAtom
lstrcatA
GetConsoleCP
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalAddAtomA
GlobalFindAtomA
FreeConsole
Sleep
GetLastError
lstrlenA
GetCommandLineA
GetConsoleOutputCP
FindResourceA
CopyFileA
AllocConsole
OutputDebugStringA
shell32
DragFinish
gdi32
SelectObject
SetBkMode
CreateCompatibleDC
GdiGetBatchLimit
GdiFlush
SetBkColor
EndPage
CreateSolidBrush
ole32
CoFreeAllLibraries
CoGetCurrentProcess
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ