Static task
static1
Behavioral task
behavioral1
Sample
09cb5ce9bb3fa8c007338d30a4f78fb0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09cb5ce9bb3fa8c007338d30a4f78fb0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09cb5ce9bb3fa8c007338d30a4f78fb0_JaffaCakes118
-
Size
403KB
-
MD5
09cb5ce9bb3fa8c007338d30a4f78fb0
-
SHA1
490845a09b5cb828e9d316d99cffb79cbeae8b98
-
SHA256
8d35deb3d4a074e5d802ade3fd9722eb42c6f40699d2de3f7854a2f46c9933ef
-
SHA512
0ff8d353351d0bdfaf2574807ea39242dab889fc054ab473f1571006d7c0a92f1f349acc260c750e59f8c272afdbd4593f66e6b14f4b805a5373481f5d6ecf6a
-
SSDEEP
6144:Dgco2dBEJvtTPsYrcyQJgPTc3Tv7zK367AVA:DgWdBEJvt/LZ7Q7uqcVA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09cb5ce9bb3fa8c007338d30a4f78fb0_JaffaCakes118
Files
-
09cb5ce9bb3fa8c007338d30a4f78fb0_JaffaCakes118.exe windows:5 windows x86 arch:x86
0a215c0a1f0c6d49197ff704d51eeece
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetCommandLineW
HeapCreate
HeapDestroy
InterlockedExchange
InterlockedIncrement
LCMapStringA
LCMapStringW
LoadLibraryA
LoadLibraryExA
MultiByteToWideChar
RtlUnwind
SetFilePointer
SetHandleCount
SetStdHandle
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WideCharToMultiByte
HeapAlloc
CreateFileW
user32
LoadIconA
LoadCursorA
advapi32
RegOpenKeyW
Sections
.text Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ