Static task
static1
Behavioral task
behavioral1
Sample
0d08c36e24862081d252e4d60ac86c20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d08c36e24862081d252e4d60ac86c20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d08c36e24862081d252e4d60ac86c20_JaffaCakes118
-
Size
191KB
-
MD5
0d08c36e24862081d252e4d60ac86c20
-
SHA1
c107cb68222f48f7e0d9460e18a98baa3633e250
-
SHA256
e0b3054497cc811c2e7dc914f62592ee2a57e4c5eeeb9443050fc64fd37e0c2b
-
SHA512
249df8f8dcaf937a0b894c3697fcd58b95420e120d2844995fe7688cfcdd2ecb9c2b29e0f3d9d71aeaee5d8323977ffce04048bf2ce95d2f0ca6953ba77bf0ab
-
SSDEEP
3072:VGPv0CctVzNQICJ+M1ifpZR3b5MhMvLWQqgkKZtx3Um6bcrNw5PA4aIiNSm8:8Pv0N3t13bmMjqgLtxEmsLSIi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d08c36e24862081d252e4d60ac86c20_JaffaCakes118
Files
-
0d08c36e24862081d252e4d60ac86c20_JaffaCakes118.exe windows:4 windows x86 arch:x86
8036d5f05815799c44a70365198a8356
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetModuleFileNameA
VirtualAllocEx
GetACP
CompareStringA
lstrcatA
DeleteCriticalSection
LoadLibraryA
GetVersionExA
ExitProcess
LocalFree
GetProcAddress
FindResourceA
ExitThread
GetOEMCP
VirtualAlloc
user32
ShowOwnedPopups
SetWindowsHookExA
KillTimer
SetScrollRange
GetCursor
IsWindowEnabled
PtInRect
DefMDIChildProcA
GetMenuItemInfoA
SetWindowLongA
DefFrameProcA
BeginPaint
version
GetFileVersionInfoSizeA
VerInstallFileA
VerFindFileA
comdlg32
GetOpenFileNameA
GetFileTitleA
FindTextA
ChooseColorA
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 129KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 194B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ