Static task
static1
Behavioral task
behavioral1
Sample
0b4e7367b77bde9edb94846c8f96a691_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b4e7367b77bde9edb94846c8f96a691_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b4e7367b77bde9edb94846c8f96a691_JaffaCakes118
-
Size
176KB
-
MD5
0b4e7367b77bde9edb94846c8f96a691
-
SHA1
12a7d92eef68623da7f5505d9d7ee2be008f06ea
-
SHA256
e0c26350369ef542777d1a2fcd034a25ad7d294bc0b5b80e1b071a3de4143895
-
SHA512
49f0e98a61c691d877b25328e55f3985f2a74107ff831274783176126d48dd1f3fa7731e24e0654fef9a731ee481ba5c33eae538b764fa60dc2a8347c0ab9506
-
SSDEEP
3072:YeFtNUW8mjSVhRirq07s8iDnyOQVylT1lVQ4d0ZkpXQR4flWQAXzogu/SqL1EB:Y0X/+hRz0BGky5VNdkkl84f89zObM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4e7367b77bde9edb94846c8f96a691_JaffaCakes118
Files
-
0b4e7367b77bde9edb94846c8f96a691_JaffaCakes118.exe windows:4 windows x86 arch:x86
0b41d311c7f0aa9348633ce3c94fd3f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
DrawIcon
SetForegroundWindow
EnumWindowStationsA
GetDC
CopyRect
GetClientRect
IsIconic
ReleaseDC
GetLastActivePopup
GetWindowRect
SetRect
ShowWindow
GetSystemMetrics
TranslateMessage
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
kernel32
GetProcessHeap
ExitProcess
CloseHandle
GetModuleFileNameA
GetCurrentThreadId
GetFileSize
QueryPerformanceCounter
GetCurrentProcessId
InitializeCriticalSection
LoadLibraryA
GetLastError
DeleteCriticalSection
SetLastError
FreeLibrary
ExitProcess
GetSystemTimeAsFileTime
GetTickCount
WaitForSingleObject
CompareStringA
GetStartupInfoW
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleHandleA
GetSystemDefaultLangID
GetVersionExA
InterlockedExchange
Sections
.text Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.strings Size: 5KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ