Static task
static1
Behavioral task
behavioral1
Sample
0b5725dfdcd837dbf38f1b6c1afa34e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0b5725dfdcd837dbf38f1b6c1afa34e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b5725dfdcd837dbf38f1b6c1afa34e6_JaffaCakes118
-
Size
43KB
-
MD5
0b5725dfdcd837dbf38f1b6c1afa34e6
-
SHA1
7da64835f3deedb5989ea925b878284b98797839
-
SHA256
cd582459f9a58afbfa9837dd3775403554370637b1d1312e08a04d53c0a4949a
-
SHA512
ccb5375eed922569853bb00e93ea3e9940c36d76ddeeb7fa150ddc729df190a26006c4eb5530fee8a297ab954beeafbb2e029444527b81467789817c5588ae60
-
SSDEEP
384:FEnlwOgJAjmJSr8h6Wf+mC6VNwUK7nVqatVl:FQHkAi444WWmHVNwvQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5725dfdcd837dbf38f1b6c1afa34e6_JaffaCakes118
Files
-
0b5725dfdcd837dbf38f1b6c1afa34e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
2427c97bd7790ce328a7b10ec090c4fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
HeapSize
GetStartupInfoA
FatalExit
GetStdHandle
CreateDirectoryW
SetLastError
ReleaseMutex
OpenEventW
CreateFileA
CreateMutexA
GetCommandLineW
lstrlenA
ReleaseSemaphore
HeapDestroy
GetVersion
GetFileSize
MapViewOfFile
RemoveDirectoryW
LoadLibraryA
VirtualProtect
RemoveDirectoryW
ReleaseSemaphore
CreateFileMappingW
SetLastError
cryptui
CryptUIWizBuildCTL
CryptUIDlgViewContext
WizardFree
LocalEnrollNoDS
CryptUIWizDigitalSign
CryptUIWizImport
LocalEnroll
CryptUIWizExport
WizardFree
DllUnregisterServer
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIStartCertMgr
iernonce
RunOnceExProcess
RunOnceExProcess
InitCallback
InitCallback
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE