Static task
static1
Behavioral task
behavioral1
Sample
0bc0fd4123f71400eeda572d10a85513_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bc0fd4123f71400eeda572d10a85513_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bc0fd4123f71400eeda572d10a85513_JaffaCakes118
-
Size
6.8MB
-
MD5
0bc0fd4123f71400eeda572d10a85513
-
SHA1
bc1cdf27efa0e3f8e8ebebf4e74373a2500b90d0
-
SHA256
ea3c26a891696f0647ee446ebc7ce2a507128c6bd89efe5d242810f1f39124e3
-
SHA512
7706b2fe8c2d053a7a3856394bec6483e051d3c637c99cff70c0f54c96c4ee35a04ceb9b08f995218cb824e388604c8827562d55b882f904f757791f3316dba4
-
SSDEEP
196608:rFJNpP5q5vHXA6S5LuxX/etae5oR2k10+lxj0LJkd0ELU:rP5q5v3dlGm2k10Ej0SdXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bc0fd4123f71400eeda572d10a85513_JaffaCakes118
Files
-
0bc0fd4123f71400eeda572d10a85513_JaffaCakes118.exe windows:5 windows x86 arch:x86
d0cb0580d90362369a350b29caa969ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
SystemTimeToFileTime
GetModuleHandleExW
GetTickCount
VirtualFree
GetProcAddress
VirtualAlloc
CreateFiber
CreateEventW
GetSystemInfo
LoadLibraryExA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLocalTime
ExitProcess
IsDebuggerPresent
user32
CloseWindowStation
OpenDesktopW
OpenWindowStationW
CreateDesktopW
advapi32
ImpersonateLoggedOnUser
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1018B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ