Static task
static1
Behavioral task
behavioral1
Sample
0c08b5511090dc8897bccba1cf4d7bb8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0c08b5511090dc8897bccba1cf4d7bb8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c08b5511090dc8897bccba1cf4d7bb8_JaffaCakes118
-
Size
76KB
-
MD5
0c08b5511090dc8897bccba1cf4d7bb8
-
SHA1
9dba47756fb8460638102bba1a76c83ffa681832
-
SHA256
b537158c524246f8e3ff77a4f5e6d16cdb8d89cb532545ed7872b08167c9dee1
-
SHA512
04e7b65b73e8eb9d34ed60eccafe47a2634b4096d477fd7daaf64e61520a73e100d4661c82f3873e706fbaa5d1853bdd21227fe3c5a3b8d998cef5d13962b1f2
-
SSDEEP
768:22GOI9U3yoPfNP0xt2d658mZifoyTolA54UXDGYbBP0KmGiB9oFXLhXmPWoNT/t:rGUyoXNP0YiEoyTol4XDL0iXd3ox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c08b5511090dc8897bccba1cf4d7bb8_JaffaCakes118
Files
-
0c08b5511090dc8897bccba1cf4d7bb8_JaffaCakes118.exe windows:4 windows x86 arch:x86
3edabddc5af1b3f246e3cd3d4b48c28b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
SetConsoleWindowInfo
GetConsoleScreenBufferInfo
GetLargestConsoleWindowSize
MapViewOfFile
UnmapViewOfFile
ReadConsoleOutputCharacterA
WriteConsoleInputA
WaitForMultipleObjects
SetEvent
GetStdHandle
CloseHandle
CreateEventA
LoadLibraryA
Sleep
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
WriteFile
GetNumberOfConsoleInputEvents
ReadConsoleInputA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
AllocConsole
FreeConsole
GetVersionExA
GlobalAlloc
GlobalFree
SetConsoleCtrlHandler
GetCommandLineA
GetLastError
SetLastError
TlsGetValue
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
SetConsoleScreenBufferSize
GetStartupInfoA
GetVersion
RtlUnwind
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TlsAlloc
GetACP
GetOEMCP
SetHandleCount
UnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
GetFileType
CreateFileA
ReadFile
SetFilePointer
GetStringTypeA
GetCPInfo
SetStdHandle
FlushFileBuffers
user32
DispatchMessageA
PeekMessageA
GetMessageA
TranslateMessage
PostQuitMessage
MessageBoxA
winmm
timeGetTime
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 59.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ