Static task
static1
Behavioral task
behavioral1
Sample
0944df4bbd0b60d05e610192bc3b3f8f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0944df4bbd0b60d05e610192bc3b3f8f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0944df4bbd0b60d05e610192bc3b3f8f_JaffaCakes118
-
Size
1.9MB
-
MD5
0944df4bbd0b60d05e610192bc3b3f8f
-
SHA1
8e007011da06369db701c66e60e47c888f069bac
-
SHA256
cefe62646b833a385e0e7c14760771f77d9b534137ee4b98bf1da4ead9134471
-
SHA512
c38307e68167eccde191e0129966ca2c85be7b9c586b1f22d19e6350caff6f6b01032fdf0ed7a1f31e4ee6c3abc79e01db991c4ec94f4341bae4ce83be846046
-
SSDEEP
12288:uB2MaAziuV/eVRxZYtwldM4pXvm5iG4D0GNduH3ZXJAv9:y7WVRx/l2qGfe0GaHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0944df4bbd0b60d05e610192bc3b3f8f_JaffaCakes118
Files
-
0944df4bbd0b60d05e610192bc3b3f8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dcae75b7afbab3e45a24ab5cadd9efa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
realloc
free
strncpy
sprintf
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
LoadLibraryA
GetProcAddress
GetEnvironmentVariableA
HeapFree
HeapAlloc
VirtualAlloc
VirtualFree
VirtualProtect
IsBadReadPtr
GetProcessHeap
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
Sleep
WideCharToMultiByte
HeapSize
HeapReAlloc
DeleteFileA
WriteFile
CloseHandle
CreateFileA
GetFileSize
ReadFile
SetFilePointer
comctl32
InitCommonControls
user32
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
ole32
CoInitialize
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 602KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ