Static task
static1
Behavioral task
behavioral1
Sample
0a020e8883c8d06bf6d07e9acda00ad2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a020e8883c8d06bf6d07e9acda00ad2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a020e8883c8d06bf6d07e9acda00ad2_JaffaCakes118
-
Size
111KB
-
MD5
0a020e8883c8d06bf6d07e9acda00ad2
-
SHA1
658685209d5f06137268a8b9f63c1bed49a71bf9
-
SHA256
f28e6e8717bc4a37aa1707cfc9a13015a5a724a2ca4c0c4fbf814c68383e30eb
-
SHA512
80de364a5f3f0a17331e0cbd62a61508035526fc0e9291f9b0b3205a8ddb3720a6a1f2545a82979c0d2839e0d83782e05ea4f4aab77265ba8ac90c24de9c781b
-
SSDEEP
3072:cb9NBJTZMD8wWiIzHYpL0s7D3hXaIS1Ae/:q9VTZDkIz4LDZgee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a020e8883c8d06bf6d07e9acda00ad2_JaffaCakes118
Files
-
0a020e8883c8d06bf6d07e9acda00ad2_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbc79d65887f86d0eae54063299e29b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetModuleFileNameW
GetCPInfo
SetEvent
CloseHandle
WriteFile
CreateFileW
TerminateProcess
GetCurrentProcess
GetLastError
GetModuleHandleW
GetVersion
GetCommandLineA
GetModuleHandleA
user32
wsprintfW
GetMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DrawMenuBar
RemoveMenu
CheckMenuRadioItem
PostQuitMessage
TranslateMessage
DispatchMessageW
InsertMenuW
LoadMenuW
DrawIconEx
CheckMenuItem
DestroyWindow
MessageBoxW
CreateDialogParamW
ReleaseCapture
GetDlgItemTextA
EndPaint
ShowWindow
ClientToScreen
GetSystemMetrics
wsprintfA
LoadStringA
CharNextExA
PostThreadMessageA
DispatchMessageA
ExitWindowsEx
ws2_32
socket
WSACleanup
WSAStartup
msvcrt
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
strchr
strcmp
strcat
_onexit
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ