Static task
static1
Behavioral task
behavioral1
Sample
0c25ff604896ea355a785b9794bda2ec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c25ff604896ea355a785b9794bda2ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c25ff604896ea355a785b9794bda2ec_JaffaCakes118
-
Size
166KB
-
MD5
0c25ff604896ea355a785b9794bda2ec
-
SHA1
4e2c73144121f98ef1d2b14e86a4752544109fd7
-
SHA256
3c790be2f421afeba119ca6a343b607686259ceda5468973ba5156710aa1c389
-
SHA512
c9a9d130644c752c6abe46e56ecc35b529ae920a8ef109239929aa64b753e0ea95915f39ddec02f51b81b1037bcdf96832a13c7840a21b7169fec0d4891d52ef
-
SSDEEP
3072:kD2yjSxkRMRz35eTxco7AGPnn0dgRfVW2LW5rgXlCd6+qa9l5:kD2ym6R68SoEGEgRfVamX43
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c25ff604896ea355a785b9794bda2ec_JaffaCakes118
Files
-
0c25ff604896ea355a785b9794bda2ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
34bb5ef256c47a6199fc26e5ff39813c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
FindFirstFileA
FreeEnvironmentStringsA
GetACP
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetFileSize
GetFullPathNameA
GetLastError
GetPrivateProfileSectionA
GetStringTypeA
GetSystemTimeAsFileTime
GetUserDefaultLCID
GlobalAlloc
GlobalFree
GlobalLock
HeapAlloc
InterlockedDecrement
InterlockedExchange
IsBadReadPtr
IsValidCodePage
LeaveCriticalSection
LoadResource
Module32First
MoveFileA
ReadFile
ReleaseMutex
SetEnvironmentVariableA
SetFileAttributesA
SetStdHandle
SizeofResource
TlsGetValue
TlsSetValue
UnmapViewOfFile
lstrcmpA
advapi32
RegEnumKeyExA
StartServiceA
Sections
.code Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ