Static task
static1
Behavioral task
behavioral1
Sample
0b555b6c0cd7d4aad5a5ffb43e7f842a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0b555b6c0cd7d4aad5a5ffb43e7f842a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b555b6c0cd7d4aad5a5ffb43e7f842a_JaffaCakes118
-
Size
633KB
-
MD5
0b555b6c0cd7d4aad5a5ffb43e7f842a
-
SHA1
16e3ad9fd415d2d9f5879e3835bf681a09cf1af1
-
SHA256
e78b55200e6852d3e033e6fd7e14e467e2fc31f565920113b863920b101a887c
-
SHA512
0e65c3c9e1f29770e000a99f09bc5b6b82b8f518a407c18376e3ca1a46daa1e8704138b4e09372407271b09e37c820782a63c31d2eacec772e6863ad0843e29e
-
SSDEEP
12288:cYw44ioprbfRvX7dxyjuioLGhItrsMdnpfrb0OiDi2:cY4iop/pvX7LqGLGhusMltpiDi2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b555b6c0cd7d4aad5a5ffb43e7f842a_JaffaCakes118
Files
-
0b555b6c0cd7d4aad5a5ffb43e7f842a_JaffaCakes118.exe windows:4 windows x86 arch:x86
1eefc2982d9f1fabe7b50fabf2025986
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleActiveScreenBuffer
FreeLibrary
GetUserDefaultLCID
CreateWaitableTimerA
SetEnvironmentVariableA
PrepareTape
VirtualQuery
GetModuleFileNameW
CreateProcessA
Beep
GlobalDeleteAtom
WritePrivateProfileSectionA
GetSystemTimeAdjustment
EnumCalendarInfoW
_hread
GetLongPathNameA
GetConsoleMode
GetAtomNameA
GlobalFree
FindFirstFileW
GetCommandLineW
LCMapStringA
SetThreadPriorityBoost
IsDBCSLeadByteEx
SetCurrentDirectoryA
PeekNamedPipe
GetSystemTime
_lopen
GetProfileIntA
lstrcmpA
GetSystemInfo
CreateDirectoryW
GetStartupInfoA
CreateMutexA
GlobalGetAtomNameW
GetCurrentProcessId
GetTimeZoneInformation
GetDriveTypeA
SetCommTimeouts
TlsGetValue
ReadConsoleInputW
GetHandleInformation
CreateIoCompletionPort
GetStringTypeExW
CompareStringA
GetComputerNameW
GetPrivateProfileStringW
EnumSystemCodePagesA
GetThreadContext
SetupComm
GetCommModemStatus
SetHandleCount
ExitProcess
comctl32
ImageList_Remove
CreateToolbarEx
oleaut32
SafeArrayUnaccessData
SysStringLen
VariantChangeType
gdi32
BeginPath
ExtCreatePen
CreateICA
Chord
user32
OemToCharBuffA
DrawTextExA
RegisterClassExW
RegisterClipboardFormatA
GetClassNameW
EndMenu
MenuItemFromPoint
DialogBoxParamW
AdjustWindowRectEx
GetSubMenu
ScrollWindowEx
GetMenuStringA
GetMessagePos
RemovePropW
IsClipboardFormatAvailable
OemToCharBuffW
EnableScrollBar
CheckMenuRadioItem
GetTabbedTextExtentA
GetMenuItemID
GetWindow
CharLowerW
SetPropA
GetMessageW
CharUpperBuffW
CharNextW
InflateRect
Sections
.text Size: 9KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ