Static task
static1
Behavioral task
behavioral1
Sample
0ee503eab582a3e4fd93147afd750218_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0ee503eab582a3e4fd93147afd750218_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ee503eab582a3e4fd93147afd750218_JaffaCakes118
-
Size
268KB
-
MD5
0ee503eab582a3e4fd93147afd750218
-
SHA1
72dc59d199372f6b8617b5c4246cdb47c6346176
-
SHA256
1e3ea0f92cf3308c57ce2c44f83aaa8c1462e3287520a9d33010b26b1b2000df
-
SHA512
424cd4e53be10f631162bc6ecc5c302563938cf063364c37750aa263e5b144132a8b80bb31173dc7998b73202ce4daecc480dd780f86d6d1879a2eb33f5e81c6
-
SSDEEP
6144:XqKCp2i/e1YPcDcroPaDt8EZjiofafvngSNN04Z20B7pB:XqKf9GcSSm9iofKgSXjR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee503eab582a3e4fd93147afd750218_JaffaCakes118
Files
-
0ee503eab582a3e4fd93147afd750218_JaffaCakes118.exe windows:4 windows x86 arch:x86
06bec47696ba4f5980f6e120562adc0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
IsBadWritePtr
LCMapStringA
VirtualFree
GetProcAddress
LCMapStringW
HeapReAlloc
WideCharToMultiByte
GetACP
GetSystemInfo
GetCurrentProcessId
HeapAlloc
CompareStringW
GetLocaleInfoA
TlsFree
GetModuleHandleA
LeaveCriticalSection
SetFileTime
IsValidLocale
TlsAlloc
GetOEMCP
HeapDestroy
GetCommandLineA
HeapCreate
SetEnvironmentVariableA
CompareStringA
GetStringTypeA
SetConsoleCtrlHandler
GlobalAddAtomW
ExitProcess
GetTickCount
OpenProcess
WriteFile
HeapFree
GetEnvironmentStrings
GetModuleFileNameA
GetUserDefaultLCID
LoadLibraryA
QueryPerformanceCounter
GetDateFormatA
VirtualAlloc
OpenFileMappingW
GetCPInfo
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetEnvironmentStringsW
GetLocaleInfoW
GetStartupInfoW
TlsGetValue
GetStringTypeExA
IsValidCodePage
GetCommandLineW
GetSystemTimeAsFileTime
GetFileType
EnumSystemLocalesA
FindResourceExA
GetLastError
GetModuleFileNameW
EnterCriticalSection
UnhandledExceptionFilter
SetHandleCount
GetVersionExA
DeleteCriticalSection
GetStartupInfoA
TlsSetValue
EnumDateFormatsA
InitializeCriticalSection
VirtualProtect
GetStdHandle
FillConsoleOutputAttribute
InterlockedExchange
GetTimeFormatA
GetStringTypeW
GetCurrentThread
SetLastError
FreeEnvironmentStringsW
FreeEnvironmentStringsA
MultiByteToWideChar
HeapSize
shell32
FreeIconList
SHFileOperationA
SHGetFileInfoA
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ