Static task
static1
Behavioral task
behavioral1
Sample
0b6fdb2b2a0bcc1bc71a2efb4cffe95b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b6fdb2b2a0bcc1bc71a2efb4cffe95b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b6fdb2b2a0bcc1bc71a2efb4cffe95b_JaffaCakes118
-
Size
75KB
-
MD5
0b6fdb2b2a0bcc1bc71a2efb4cffe95b
-
SHA1
3049c64b031c3132302a3af0427acd66cdc1c9cb
-
SHA256
b7703fe62cf9887a1b9041bc8a4a4bc2b6aaab31bb48a11ff30723e5bab4b56a
-
SHA512
7b2984d0e490d68356d0797965d0e26548fe6900b55ea0ce0c86260524d2e64af057cb8e99a1e18baaaebfbaf03bf7c0cf736687eba7d6033948c60d18de49a2
-
SSDEEP
768:ZcXgEsi1TwRDCaI3lhjtDw/XZd9KbjobhOm8eQYMFCPQFOs4TUyv41:ZqgEsYTwtCVwvNKH2hFztQtWUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b6fdb2b2a0bcc1bc71a2efb4cffe95b_JaffaCakes118
Files
-
0b6fdb2b2a0bcc1bc71a2efb4cffe95b_JaffaCakes118.exe windows:4 windows x86 arch:x86
14e0e0e568518ba9a7b2408b1e60d7e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
CloseHandle
LocalFree
ReleaseMutex
FindAtomW
GetModuleHandleA
CreateFileA
GetTickCount
CreateThread
HeapCreate
LoadLibraryW
GetFileAttributesW
GetSystemTime
GetDiskFreeSpaceW
SetEvent
GetComputerNameA
SetLastError
ResetEvent
lstrcmpiW
ResumeThread
user32
CloseWindow
SetFocus
GetDlgItem
CallWindowProcA
GetComboBoxInfo
GetKeyState
CreateWindowExA
GetClassInfoA
DrawStateA
DispatchMessageA
DestroyCaret
GetClipCursor
FillRect
MessageBoxA
cryptdlg
DecodeRecipientID
CertTrustFinalPolicy
CertTrustInit
CertTrustCertPolicy
CertConfigureTrustA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dqdmotu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE