Static task
static1
Behavioral task
behavioral1
Sample
0bedbb1fe6caf5cec62e1b37099efae9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0bedbb1fe6caf5cec62e1b37099efae9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bedbb1fe6caf5cec62e1b37099efae9_JaffaCakes118
-
Size
249KB
-
MD5
0bedbb1fe6caf5cec62e1b37099efae9
-
SHA1
d7d0b6441fe8b6e79ead91ac9f845c324cb20860
-
SHA256
6165a71fef48d666277db7b856454bacd8b4c2296b289c0c9c0fca5781196b58
-
SHA512
b20f41df9c752ef0b2b2fbed8e69826d5cec2a11ddc2534cc720fbaf6c1f5b52177b82102a3916d4a0e9d60037132f4c12856443e109fbf0c54777860847ca8b
-
SSDEEP
6144:fsKjC7p/mXYZiFudvV8Bwq/H0ZkavDDqH421:IJZd1YHSvDD+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bedbb1fe6caf5cec62e1b37099efae9_JaffaCakes118
Files
-
0bedbb1fe6caf5cec62e1b37099efae9_JaffaCakes118.exe windows:4 windows x86 arch:x86
79bace2211f63de618f953f4dfa80b9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
DeleteFileA
GetModuleHandleA
GetTickCount
ReleaseMutex
CloseHandle
SetEndOfFile
FindClose
WaitForSingleObject
InitializeCriticalSection
FindClose
AddAtomW
HeapCreate
HeapDestroy
IsBadCodePtr
GetCurrentDirectoryA
SetFileAttributesA
GetEnvironmentVariableA
ResumeThread
GetStartupInfoW
GetTickCount
CreateFileA
ResetEvent
GetFileSize
HeapSize
wininet
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpOpenFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FindCloseUrlCache
FtpFindFirstFileA
FtpDeleteFileA
FtpPutFileA
HttpQueryInfoA
FtpGetFileA
HttpEndRequestA
DeleteUrlCacheEntryA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ