Static task
static1
Behavioral task
behavioral1
Sample
0ae81361cba531547da20b37f63b8e69_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ae81361cba531547da20b37f63b8e69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ae81361cba531547da20b37f63b8e69_JaffaCakes118
-
Size
53KB
-
MD5
0ae81361cba531547da20b37f63b8e69
-
SHA1
6cc228e277afe3f5dd03b67bbef954c1bf282343
-
SHA256
d3c9aad3b5be86fa6bccf9924fcb5a22d237612c05c9d302d584f0fe18446a59
-
SHA512
b3c8f17ab369e544b34d4fbf3ff54ae98e24cb1b3b9482292fe521d641f3a6f1977e9aa542f9b46ea94c3df1f50fece358cf946d7bc70681cea08a2568c263e1
-
SSDEEP
768:JgSfAJxHbvigVzoiltIYsUSXGjFerw/V+hK2L5okk6WCHAR7Tpl3Gkka:mSS5zRE0erpHlWCHARXpq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae81361cba531547da20b37f63b8e69_JaffaCakes118
Files
-
0ae81361cba531547da20b37f63b8e69_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2cc3d1e520429df190f7febd39743d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetThreadLocale
GetTickCount
GetVersionExA
IsBadReadPtr
IsBadStringPtrW
IsDBCSLeadByteEx
GetFileSize
MulDiv
ReadFile
SetEvent
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WriteFile
GetCurrentDirectoryA
CloseHandle
GetCPInfoExW
FoldStringW
ExitProcess
EnterCriticalSection
DeviceIoControl
CreateThread
CreateFileA
CopyFileA
IsDebuggerPresent
wsock32
gethostbyname
WSACleanup
WSAStartup
user32
GetParent
GetPropW
GetWindowRect
InsertMenuW
InvalidateRect
IsWindow
MapWindowPoints
OffsetRect
SendMessageW
SetRect
SetWindowTextW
TranslateMessage
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
ChildWindowFromPoint
BeginPaint
advapi32
AllocateLocallyUniqueId
GetSecurityDescriptorDacl
GetTokenInformation
MakeSelfRelativeSD
OpenThreadToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
AccessCheck
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE