Static task
static1
Behavioral task
behavioral1
Sample
09331d82b7dd3a186e180f591ca5acfa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09331d82b7dd3a186e180f591ca5acfa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09331d82b7dd3a186e180f591ca5acfa_JaffaCakes118
-
Size
140KB
-
MD5
09331d82b7dd3a186e180f591ca5acfa
-
SHA1
610fb228c20d27f3069fd1dc60acd23a382ecc0e
-
SHA256
e3ece96d9d0ac3a0fcb1dd2e67b2436279ec32afe789767c29afbdbbd422b380
-
SHA512
7652f63f21aae4c87b08953b3b885013260c70856dda9a809ac638bb80c89df35b782b741b25cbc43d66a8645f3d34f9aa665257952247eadc48855bb2e61d87
-
SSDEEP
3072:na45Cn5FWtSFYLMLXYUHfFpefotdQlgG5REeVnL5BxzbeKwhoItc56:dIn5TF2QXY8ofoTS4+nLlzbJwhLtR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09331d82b7dd3a186e180f591ca5acfa_JaffaCakes118
Files
-
09331d82b7dd3a186e180f591ca5acfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b1866ff60704963cbd768050aafae25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
FlushInstructionCache
GetCurrentProcess
CreateThread
GetSystemTimeAsFileTime
ReadFile
CreateFileW
GetVersionExA
lstrlenA
ResetEvent
WaitForMultipleObjects
GetStartupInfoA
CreateEventA
FindFirstFileW
CloseHandle
QueryPerformanceCounter
LoadLibraryA
FreeEnvironmentStringsA
UnhandledExceptionFilter
InterlockedCompareExchange
LocalFree
LocalAlloc
EnumResourceNamesA
GetCurrentThread
SetFilePointer
WaitForSingleObject
GetLastError
Sleep
SetEvent
GetOverlappedResult
LeaveCriticalSection
CreateSemaphoreA
ExitProcess
TerminateProcess
GetDriveTypeW
DeleteCriticalSection
lstrcatA
FreeLibrary
ReleaseSemaphore
WriteFile
SetUnhandledExceptionFilter
InitializeCriticalSection
InterlockedExchange
SetEndOfFile
FindClose
EnterCriticalSection
GetLocalTime
GetTickCount
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ