Static task
static1
Behavioral task
behavioral1
Sample
0ac35745716e8d01362e5b521ce8dae5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ac35745716e8d01362e5b521ce8dae5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ac35745716e8d01362e5b521ce8dae5_JaffaCakes118
-
Size
51KB
-
MD5
0ac35745716e8d01362e5b521ce8dae5
-
SHA1
311fb6f99c04ecee74afe7ccdd27157a08241e8e
-
SHA256
a4a050e70b9caa57c3861044a26865fa33ff3aedaa5972951db7384505165fc6
-
SHA512
cbdbf7cb830485a35365946801bbc2db93e32faf049d6dcea20f0fb233031c441a8239a39d259a60ea028219dc6a124767dd34a2a086321403b98e8e63dbd82a
-
SSDEEP
1536:czZFjG9zNfP8aUkpbE9dfBQ6Nf9l7FvRzAdHgODO/:czzqGa5dEfb5zzApDO/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ac35745716e8d01362e5b521ce8dae5_JaffaCakes118
Files
-
0ac35745716e8d01362e5b521ce8dae5_JaffaCakes118.exe windows:4 windows x86 arch:x86
67cb795c966778969af26d4ed7061689
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
FatalAppExitA
FileTimeToLocalFileTime
GetACP
GetCommandLineA
GetCommandLineW
GetEnvironmentVariableA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
LocalAlloc
LocalFree
MultiByteToWideChar
ReadProcessMemory
RtlUnwind
SetLastError
SetPriorityClass
SetStdHandle
SetUnhandledExceptionFilter
TlsFree
lstrlenA
user32
RegisterClassA
CallWindowProcA
wsprintfA
GetSysColorBrush
advapi32
LsaSetTrustedDomainInfoByName
LsaCreateSecret
AccessCheckByType
QueryAllTracesW
olepro32
OleCreatePropertyFrame
OleCreatePictureIndirect
OleIconToCursor
oleacc
AccessibleObjectFromWindow
GetRoleTextW
ObjectFromLresult
GetStateTextA
AccessibleObjectFromEvent
AccessibleChildren
security
QueryContextAttributesW
AddSecurityPackageW
setupapi
SetupQuerySpaceRequiredOnDriveW
SetupQueueRenameSectionW
SetupScanFileQueueW
SetupGetTargetPathW
SetupCommitFileQueueA
SetupDiClassNameFromGuidExW
SetupFindNextLine
SetupGetBackupInformationW
SetupGetSourceFileSizeW
Sections
.text Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ