Static task
static1
Behavioral task
behavioral1
Sample
0a03cb8b2fff4d1ae281657ac8c30ae3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a03cb8b2fff4d1ae281657ac8c30ae3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a03cb8b2fff4d1ae281657ac8c30ae3_JaffaCakes118
-
Size
406KB
-
MD5
0a03cb8b2fff4d1ae281657ac8c30ae3
-
SHA1
d339a54ec62e61113550a79a8ab36a772be78a3b
-
SHA256
a881b0e6267a8b34399527623494ebe4b9275231ee6f88248e09246832cb1a8a
-
SHA512
411843c0e037e5f64d04f8fe1be159838100cea1609b1320c3ffac8371876cc763745b1e4ac0a681c27d5bfda9fbc34e78c0d30f904266f65a41a19bb55986e4
-
SSDEEP
6144:tVuOGMyHLsBI4gHGvSKxUsCNO8O8CcuX3Ft+uwnBLxDvWISNKB5:6VprsBTvSKxUxNONB18dBlzWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a03cb8b2fff4d1ae281657ac8c30ae3_JaffaCakes118
Files
-
0a03cb8b2fff4d1ae281657ac8c30ae3_JaffaCakes118.exe windows:5 windows x86 arch:x86
f2f212ef59607115ca046ec2e8b8b2f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
QueryPerformanceCounter
GetFileTime
FormatMessageW
RaiseException
GlobalFix
SetCurrentDirectoryW
GetACP
user32
FindWindowW
IsWindowEnabled
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW
crypt32
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore
shell32
SHGetFolderPathW
ole32
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoQueryProxyBlanket
gdi32
DeleteObject
SelectObject
StretchBlt
GetDIBColorTable
SetDIBColorTable
GetObjectW
odbc32
SQLFreeStmt
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ