Static task
static1
Behavioral task
behavioral1
Sample
0bd208e3370e7735a9d40f61e049ceaf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bd208e3370e7735a9d40f61e049ceaf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bd208e3370e7735a9d40f61e049ceaf_JaffaCakes118
-
Size
120KB
-
MD5
0bd208e3370e7735a9d40f61e049ceaf
-
SHA1
d61e1f015b3485f0d5629a785bf2db7212e79e38
-
SHA256
95c1b8f3131556b4380229e942a5e83d9deb9ee0a3c934975f209db46bf653b5
-
SHA512
d2676271a7126a5d6fd7b77e58f8bd7cd7d7bb36ce185c6de155801a99906a9ce50add1fb6062f20b312cf43360059b1ade0223a919514b2d54d43a68c7f7e20
-
SSDEEP
3072:T+csb0hbyvh+aZ0lPwZs8p76okjvJfGA:TKVZ0loy6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd208e3370e7735a9d40f61e049ceaf_JaffaCakes118
Files
-
0bd208e3370e7735a9d40f61e049ceaf_JaffaCakes118.exe windows:5 windows x86 arch:x86
0f6c46b2359212de10bd26a1c33881fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
QueryPerformanceCounter
GetProcAddress
VirtualAlloc
TlsAlloc
CloseHandle
SetFilePointer
GetCommandLineA
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
HeapAlloc
IsValidCodePage
GetSystemTimeAsFileTime
GetVersion
GetModuleHandleW
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
user32
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
GetSystemMetrics
LoadIconW
RegisterClassExA
DefWindowProcA
BeginPaint
EndPaint
FindWindowA
wsprintfA
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
gdi32
CreateBitmap
advapi32
RegOpenKeyExA
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ