Static task
static1
Behavioral task
behavioral1
Sample
0e110fe8e1449b67c70ce41ad384d18d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e110fe8e1449b67c70ce41ad384d18d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e110fe8e1449b67c70ce41ad384d18d_JaffaCakes118
-
Size
112KB
-
MD5
0e110fe8e1449b67c70ce41ad384d18d
-
SHA1
b0f611ed58751422c55d1baa7b5125ee500a26d9
-
SHA256
ce011b4c9178373ee2f7c22553a0213bc2f3d94d8e86fbb9631aaf2899b7319f
-
SHA512
675d4e460aa1e0b1702f3bbab9fc576aca93386f91546202c94109097e30c4c0af2f997f59b128d1d32d629cc90fddbbf87c3d4738338c14f8dbd3e51ba63da6
-
SSDEEP
3072:o8l9F0MVHAhz7kYhUVEHePnZMmoCdQg7nZ4GwPJltZrpRiX:d0MFK0Yhm3nZMgdQg7nZ4Gwbthp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e110fe8e1449b67c70ce41ad384d18d_JaffaCakes118
Files
-
0e110fe8e1449b67c70ce41ad384d18d_JaffaCakes118.exe windows:4 windows x86 arch:x86
527b843d92ce6fdf6fa5411dc35238b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetVersion
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
GetFileSize
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
LockResource
FindResourceA
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
LoadResource
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStringTypeW
user32
GetClientRect
wsprintfA
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DialogBoxParamA
FindWindowA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
gdi32
CreateBitmap
TextOutA
advapi32
RegCloseKey
RegSetValueExA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ