Static task
static1
Behavioral task
behavioral1
Sample
0878cdbc12051d83fb3dbaab249f8f34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0878cdbc12051d83fb3dbaab249f8f34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0878cdbc12051d83fb3dbaab249f8f34_JaffaCakes118
-
Size
283KB
-
MD5
0878cdbc12051d83fb3dbaab249f8f34
-
SHA1
b236aff01af9201899a50e412be39f03f8f66097
-
SHA256
755037ec10f7996aa64a5b3d2f66e0be18b0adc52c6492642072b1f9b95f5930
-
SHA512
0c389e0abfc186c36083609fb777806098a2d2d178017530facdc43d02f59fce1a4928a8c47ef83b4c2fca17c37ae635b1368e7649037eee0b25f6291de9bf5a
-
SSDEEP
6144:KwjB4Epjwp3jMmBjVwanjOExNb4ZBOCDQyxXmy:KwjB7O4mBfaqOBbDgy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0878cdbc12051d83fb3dbaab249f8f34_JaffaCakes118
Files
-
0878cdbc12051d83fb3dbaab249f8f34_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1b4ed08bdca17806a57581b87ac33d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
GetACP
GetDateFormatA
GlobalGetAtomNameA
TlsAlloc
MultiByteToWideChar
GetCPInfo
SetStdHandle
SetFilePointer
IsValidCodePage
HeapReAlloc
GetOEMCP
RtlUnwind
EnumResourceNamesA
GetLocaleInfoA
CreateHardLinkA
WriteConsoleA
GetConsoleOutputCP
GetTimeFormatA
VirtualAlloc
HeapSize
TlsGetValue
RaiseException
occache
FindControlClose
shell32
SHGetFolderLocation
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetMalloc
DragAcceptFiles
SHGetPathFromIDListW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHAppBarMessage
Shell_NotifyIconW
Sections
.text Size: 128KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ