Static task
static1
Behavioral task
behavioral1
Sample
0d61462b17105fdc787dad992841320e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d61462b17105fdc787dad992841320e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d61462b17105fdc787dad992841320e_JaffaCakes118
-
Size
107KB
-
MD5
0d61462b17105fdc787dad992841320e
-
SHA1
2223dda4c9f30fa72430c733bb8b9bf6913685b9
-
SHA256
06c89b65cdbd5c1b3bfa95efbd3daad26c09e7a990d5ef09fef6718f2cd1c1e9
-
SHA512
26dd0713d4b63ac20d7f9cc1118668fe82580a6dce376d88bfce1c0bfdbe89eaf146c0fe06c45f9e6792e4a3bd64d7374c503cc3e91f144b0e5900f05dd29356
-
SSDEEP
1536:cNwGXfxwKHRERwEdesg8SY6Z3vV2Qbl7uZm8ejgq8+I7dd7VFBvNBiXvv2ZSw0K7:OBJZRERleT8a3d2QblLgc4NNM/twv9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d61462b17105fdc787dad992841320e_JaffaCakes118
Files
-
0d61462b17105fdc787dad992841320e_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7e5145558acc698fb8209a2966cbfb8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
GetLastError
TlsSetValue
ExitProcess
GlobalFree
IsBadReadPtr
RtlUnwind
GetCurrentProcess
DuplicateHandle
GetStdHandle
InitializeCriticalSection
DeleteCriticalSection
FindNextFileA
GetEnvironmentStrings
FreeEnvironmentStringsA
WriteFile
DeleteFileA
msvcrt
_mbsrchr
_mbschr
user32
wsprintfA
MessageBoxA
ole32
OleInitialize
CoCreateInstance
Sections
.code Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 94KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ