Static task
static1
Behavioral task
behavioral1
Sample
0d737680ebe0718adab1af9c86af3586_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d737680ebe0718adab1af9c86af3586_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d737680ebe0718adab1af9c86af3586_JaffaCakes118
-
Size
218KB
-
MD5
0d737680ebe0718adab1af9c86af3586
-
SHA1
9aeed12c9ce0ba95a5f06f842fc19fc0864570aa
-
SHA256
74ad5385abc19a5153a5d86529c8f73f9f1d427b7f0ee1ae8ab839417ebc43e3
-
SHA512
1fd4ac13dd92a5d1018092761dcaae0a6d95279e475ee1b768f03b1f5bc741377673b6e9415b82d54d161440791899aa9c31fedcfb34bc039002466ed90d9ca0
-
SSDEEP
3072:CDWA53Rc+VsprMeY4W6JUEcL8DP/7BHNgfi60S2jbxWGq:Cz3CZAr4WmUEaWdHC0SbGq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d737680ebe0718adab1af9c86af3586_JaffaCakes118
Files
-
0d737680ebe0718adab1af9c86af3586_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe474cc9309f1a1a8ed553578e7402d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
lstrcatA
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
lstrlenA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
CreateFileW
VirtualAllocEx
CreateFileA
user32
LoadIconA
LoadCursorA
EndPaint
PostQuitMessage
DefWindowProcA
gdi32
GetStockObject
CreateEnhMetaFileA
MoveToEx
LineTo
CloseEnhMetaFile
DeleteEnhMetaFile
advapi32
RegOpenKeyExA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ