Static task
static1
Behavioral task
behavioral1
Sample
0d945e0a6cc6ae490893dbdf8810b4d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d945e0a6cc6ae490893dbdf8810b4d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d945e0a6cc6ae490893dbdf8810b4d0_JaffaCakes118
-
Size
19KB
-
MD5
0d945e0a6cc6ae490893dbdf8810b4d0
-
SHA1
307ee412364ef38ebe5bd6d3fd83974867bfd7e1
-
SHA256
fc4e33e96a36316958094a27504ec010aec989dd359ba9871f9dbaccabbec836
-
SHA512
848261b63b2400279bc6f8f1b46c509e79cd193023df4b10bb4fc733304d438d46a38699a1782e1a44fcc8895144241287eaf818e1545120c77ddcdc61e82a3b
-
SSDEEP
384:2/U72ya7nXFYaqlAbkUgBWypwJTEdUXvO1h8YmVEckeUV2G:2/I2F1Xql0kUgBWpxGh8NV8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d945e0a6cc6ae490893dbdf8810b4d0_JaffaCakes118
Files
-
0d945e0a6cc6ae490893dbdf8810b4d0_JaffaCakes118.exe windows:5 windows x86 arch:x86
226496ea72b61a8ab58509a68eff17a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
WideCharToMultiByte
SetUnhandledExceptionFilter
LoadResource
FindResourceA
GetWindowsDirectoryA
MultiByteToWideChar
lstrcmpA
RtlUnwind
CreateProcessA
IsValidCodePage
lstrcmpW
InterlockedDecrement
GetLastError
InterlockedCompareExchange
SizeofResource
CloseHandle
GetUserDefaultLCID
GetStringTypeA
lstrcpynA
IsDBCSLeadByte
lstrlenA
GetACP
lstrcatA
IsDebuggerPresent
CompareStringA
LockResource
ExitProcess
LocalFree
FormatMessageA
ReadFile
CreateFileA
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
LoadCursorA
LoadStringA
MessageBoxA
wsprintfA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ