Static task
static1
Behavioral task
behavioral1
Sample
0956f25107e74fba9de0ca38716aa495_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0956f25107e74fba9de0ca38716aa495_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0956f25107e74fba9de0ca38716aa495_JaffaCakes118
-
Size
451KB
-
MD5
0956f25107e74fba9de0ca38716aa495
-
SHA1
385eec861f2466aab9d0e389e4ae285b84dde2ff
-
SHA256
a983f98e16cbb16bc8da9b9a141ae9e81b7ab28624a5c8e277ea07078c74645e
-
SHA512
2f7800c83cf8352cf9bcba1080a153ff92e71b4a68d4b713f643ce69b0d78abb12e3cfaa41ab48599f94adfd0ad9c3b4743ad098f29d13c380904d5c6c20a792
-
SSDEEP
6144:MR/HGf+ryXKA6P196JHZLLDoqPeGn7tJBMOuwgz0wW07MpezITXcntdxa8Wg2riv:ufk+pA6r61doqPFuwJ0WXctXa80ri
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0956f25107e74fba9de0ca38716aa495_JaffaCakes118
Files
-
0956f25107e74fba9de0ca38716aa495_JaffaCakes118.exe windows:5 windows x86 arch:x86
b4197b82ca8b06ab4cca046158f917a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
FindVolumeClose
CancelIo
GetFileType
LocalSize
lstrlenA
GetFileAttributesA
WriteFile
GetCommandLineW
HeapFree
CloseHandle
GetModuleHandleA
GetFileTime
FindVolumeClose
EnterCriticalSection
GetCommandLineA
GetModuleFileNameA
IsBadReadPtr
SetFileAttributesW
GetCurrentDirectoryW
HeapCreate
WaitForMultipleObjects
GetDriveTypeA
FindClose
ExitThread
uxtheme
GetThemeColor
CloseThemeData
IsThemeActive
DrawThemeEdge
GetWindowTheme
CloseThemeData
GetThemeEnumValue
DrawThemeBackground
GetThemeTextMetrics
GetThemeBool
OpenThemeData
GetThemeTextExtent
SetWindowTheme
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE