Static task
static1
Behavioral task
behavioral1
Sample
0e5490abb633a74578cc1202b3b1dcc5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0e5490abb633a74578cc1202b3b1dcc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e5490abb633a74578cc1202b3b1dcc5_JaffaCakes118
-
Size
194KB
-
MD5
0e5490abb633a74578cc1202b3b1dcc5
-
SHA1
ed435b9469f100326bbccb8d2c6a6b58ac4c80b5
-
SHA256
e8811a041e5faee6f2ac074d08c6d58610c45a1b69e9bc72dd3253017900820b
-
SHA512
d523cb51b143203b6433fb62c055f327110322903bd2b0534dffeea81a204ad7455a3741e2b5342c99eefbdd5ac50eb0c8b75d6256286aeb7dda3d362bb14129
-
SSDEEP
3072:mtbC9GEqwQN3bFGoTBMhHRYixlLPQ9PPIzfg:mU983bTq5uP+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e5490abb633a74578cc1202b3b1dcc5_JaffaCakes118
Files
-
0e5490abb633a74578cc1202b3b1dcc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa90eb6e1cb2ddb6525316af3e47c683
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuA
GetDlgItem
GetWindowTextA
DialogBoxParamA
CopyImage
GetCursor
LoadCursorA
IsWindow
DrawIconEx
DialogBoxParamW
AppendMenuW
IsMenu
CopyIcon
DrawTextW
CopyRect
LoadMenuA
DrawTextA
EndDialog
GetWindowTextLengthA
CreateIcon
InsertMenuA
AlignRects
LoadMenuA
GetMenu
GetFocus
GetDC
CalcMenuBar
CloseWindow
kernel32
FindFirstFileA
CopyFileW
DeleteAtom
ReadConsoleW
ReadFile
CopyFileExW
GetConsoleMode
ExitThread
ReadConsoleA
CreateDirectoryA
DeleteFileA
GetCommandLineA
DeleteFileW
OpenFileMappingA
Sleep
GetLastError
CopyFileExA
GetCPInfo
GetFileTime
OpenFile
WriteFile
CopyFileA
GetFileSize
GetStdHandle
CreateThread
GetComputerNameA
Sections
CODE Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.INIT Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.relca Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 129KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ