Static task
static1
Behavioral task
behavioral1
Sample
0838d1d787530f526c2591c04e6dc9f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0838d1d787530f526c2591c04e6dc9f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0838d1d787530f526c2591c04e6dc9f9_JaffaCakes118
-
Size
62KB
-
MD5
0838d1d787530f526c2591c04e6dc9f9
-
SHA1
8fd15c7cd93e101190334db6cdeb7de01dced9c3
-
SHA256
b8bafc7e30480b0fadb1a44612118d19d56de1b171bc3a16c1d2f53b49c20889
-
SHA512
6c7f47fd1842fb2d3062a87b4940c5d0c5109e2e0f6938b3f837747d2d614398cdbae79035b177076acf4d59da9996aa4014a865af6542d78329232848ad1b36
-
SSDEEP
1536:MJ5k/boiFbMnnqTVuX/lsF+6pjN8W/iX8OrM15bj:aC/sYwSg/s+6pNHI8OrM15bj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0838d1d787530f526c2591c04e6dc9f9_JaffaCakes118
Files
-
0838d1d787530f526c2591c04e6dc9f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
e08b39455607b2922ef89b9e2f74c398
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetCommandLineA
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapCreate
AddAtomA
AddConsoleAliasA
FindAtomA
DeleteAtom
user32
CheckMenuItem
CharPrevA
GetDesktopWindow
CheckMenuRadioItem
CheckDlgButton
CharNextA
CheckRadioButton
CharUpperA
CharLowerA
shlwapi
StrStrIA
UrlIsOpaqueA
StrSpnA
StrStrA
gdi32
RealizePalette
GetDCPenColor
SelectPalette
UnrealizeObject
ResizePalette
SetTextAlign
StartPage
SelectObject
d3d8
Direct3DCreate8
shell32
ord680
ord153
ord152
DragFinish
ord66
ord240
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ