Static task
static1
Behavioral task
behavioral1
Sample
0eb58cbc4ac482c4912098fa2854c638_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0eb58cbc4ac482c4912098fa2854c638_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0eb58cbc4ac482c4912098fa2854c638_JaffaCakes118
-
Size
223KB
-
MD5
0eb58cbc4ac482c4912098fa2854c638
-
SHA1
4ee4ededcba23ec899a0eb2beb6023d24c626fb2
-
SHA256
620b013ced32c2d7391c47a9e6f8a5bab028fece0aaac13e3122ef1c497835af
-
SHA512
c8643e907c07af1c64726b7bcd97d3425a282de626bd0d82d71674f3abeeb7f300e6c91d41de354a377966254294e0ec1de45ae1c74b65360f36c3d35de2e9ac
-
SSDEEP
3072:s0OlEt+hh/inLK0k2F2fXeqZIbGhAXXoM84BLWJQ3bma1jFkVJ1Fbo:xFKd4qYGiIZ4BLW+3y4kV/Fs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb58cbc4ac482c4912098fa2854c638_JaffaCakes118
Files
-
0eb58cbc4ac482c4912098fa2854c638_JaffaCakes118.exe windows:4 windows x86 arch:x86
7fe5dcffbedf8396b69f0667ba3a1fc6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCurrentThread
IsDebuggerPresent
GetCurrentProcess
GlobalFindAtomA
GetModuleHandleW
GetConsoleOutputCP
GlobalFindAtomW
lstrcmpiW
QueryPerformanceCounter
lstrcmpA
RemoveDirectoryA
GetDriveTypeA
GetUserDefaultLangID
GetCurrentThreadId
GetWindowsDirectoryA
CopyFileA
GetProcessHeap
SetLastError
GetCommandLineW
GetVersion
lstrlenA
GetLastError
GetStartupInfoA
lstrcmpiA
GetOEMCP
DeleteFileW
MulDiv
SetCurrentDirectoryA
VirtualAlloc
lstrlenW
Sleep
LoadLibraryW
GetCurrentProcessId
GetCommandLineA
GetTickCount
DeleteFileA
GetModuleHandleA
user32
GetDesktopWindow
GetDC
GetSystemMetrics
CharNextA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ