Static task
static1
Behavioral task
behavioral1
Sample
0b3861589125a85d404677fc587ee283_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b3861589125a85d404677fc587ee283_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b3861589125a85d404677fc587ee283_JaffaCakes118
-
Size
75KB
-
MD5
0b3861589125a85d404677fc587ee283
-
SHA1
0bf24ad96e92936306f2cf15f9c482cd8ca8f59a
-
SHA256
0a082f22a44bffe8d639589942789e8839e19dff9f62c7ebe319af53ea5e67c4
-
SHA512
1795ad0f753ab7bb17739fe2712a89aaec1abc400590d83cb16d589a435ae08a8fff44dc44ddf8a46613ed594dfa5a885be8d7743d9ae35fb91285ee83f867ed
-
SSDEEP
1536:SKhtgyzpUxyJ8p91EIeiB+Y1JfoHPgjIsVahNBwiOU:SItr9UxyJ8pXEIeiB+YwvgjjVqNqip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3861589125a85d404677fc587ee283_JaffaCakes118
Files
-
0b3861589125a85d404677fc587ee283_JaffaCakes118.exe windows:4 windows x86 arch:x86
1aee0e3fff1d97461d777d066502a9a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadTimes
CreateMutexA
IsDBCSLeadByte
ReleaseMutex
GetLargestConsoleWindowSize
GetOEMCP
GetThreadLocale
GetExitCodeThread
GetThreadPriority
GetUserDefaultLangID
CreatePipe
VirtualAlloc
GetConsoleCP
AddAtomA
TlsGetValue
CompareStringA
GetHandleContext
CancelWaitableTimer
GetModuleHandleA
SetEvent
TlsFree
user32
GetFocus
GetClassInfoExA
ShowWindow
InvalidateRect
ReleaseDC
IsWindowVisible
GetActiveWindow
GetSystemMetrics
CloseWindow
ValidateRect
GetClassNameA
GetDC
IsIconic
GetWindowTextLengthA
ReleaseDC
GetForegroundWindow
GetWindow
GetWindowTextA
RegisterClassA
tapi32
MMCShutdown
MMCSetServerConfig
MMCSetLineInfo
MMCSetPhoneInfo
MMCInitialize
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ