Static task
static1
Behavioral task
behavioral1
Sample
0a5090b62ad25d2abf67b561c69f1e19_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a5090b62ad25d2abf67b561c69f1e19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a5090b62ad25d2abf67b561c69f1e19_JaffaCakes118
-
Size
67KB
-
MD5
0a5090b62ad25d2abf67b561c69f1e19
-
SHA1
2423dabf3188d98e04d3d66e6e5ec23ec320ded3
-
SHA256
f110521f2fe613aad777c215d493b115a16f12472beca743d8358e2dcf7f080d
-
SHA512
5748709b297d6514475caa05ff89773e09f3afb5fde97959a56b7160382351c018bb4e1e84ca87f82b5cf30534e00f07812dad5591969476669a46d128f9eb82
-
SSDEEP
768:+rszrkhZU9XYxnv1sbVLPih4nhCnM4XsJsun3:yuS0YrqdKccMtb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5090b62ad25d2abf67b561c69f1e19_JaffaCakes118
Files
-
0a5090b62ad25d2abf67b561c69f1e19_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3aeb7ae97a75da1b26fe5fb937259e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GlobalAlloc
Sleep
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
user32
LoadIconW
UpdateWindow
BeginPaint
DefWindowProcW
TranslateMessage
LoadAcceleratorsW
DispatchMessageW
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
LoadStringW
PostMessageW
CreateWindowExW
LoadCursorW
RegisterClassExW
msvcr80
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_lock
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_initterm_e
?terminate@@YAXXZ
_unlock
__dllonexit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ