Static task
static1
Behavioral task
behavioral1
Sample
0d9a76287df6f133aa7118698fc182b3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0d9a76287df6f133aa7118698fc182b3_JaffaCakes118
-
Size
368KB
-
MD5
0d9a76287df6f133aa7118698fc182b3
-
SHA1
3f2985ba27b39a7be50586fce0129efd8eae90de
-
SHA256
71a01489abf43835ab1ddc384d91e50547caaf863c0878eedc757c0db2d90383
-
SHA512
5fcf2b5332692412ab7a4fd93dd5963624a3df5122177fee4279785bc213cd27752e4aa6211e27cb9c2f465aa5b5acaebad2d8728cd04e16367b271a8859346d
-
SSDEEP
6144:Dx9leOvZGuuAYUw7ydzeddCmSqHRp3S2spoE77DcveKQM6s/OwU0AoM:DxreOvouuAYUKnIgIDoEo+0E+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d9a76287df6f133aa7118698fc182b3_JaffaCakes118
Files
-
0d9a76287df6f133aa7118698fc182b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f724b63252d8e709a15dd8175a75ec6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
CloseHandle
VirtualAlloc
Sleep
SizeofResource
GetModuleHandleA
LockResource
LoadResource
FindResourceExA
PulseEvent
FreeResource
VirtualFree
LoadLibraryA
GetSystemTime
VirtualProtect
LocalAlloc
GlobalFree
WriteFile
CreateFileA
GlobalAlloc
GetProcAddress
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
FreeLibrary
GetStringTypeA
ExitProcess
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
TerminateProcess
user32
MessageBoxA
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassExA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
EndDialog
LoadStringA
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
gdi32
GetObjectA
GetDIBits
ole32
CoInitialize
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE