Static task
static1
Behavioral task
behavioral1
Sample
0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118
-
Size
164KB
-
MD5
0ed664a2d35eaa5269a4b3d260296350
-
SHA1
a271696502fa46b9ed8708760bb8daea872d4d1e
-
SHA256
8f193d29d6cf3c90b84f85679722f57d625a1f01cd0af233e8612fb0dc5d79f9
-
SHA512
d8cee1fc886ca51105c773aa763f33a6566ff0af3006f5b8919bb74648674edcaee70ed68145ebff7e3d1d6a1eb4e27010f886a82cb153778f2537e40f39763b
-
SSDEEP
3072:R+qZQOhWL8RYiZ6xUS6n9lBFO1SSAhKGnAlRLUp/fDd2KT9Fk7hKPDFtd2Wi:tQOgLoYiZ6xUSO9lG1SSA63LU72g7o0M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118
Files
-
0ed664a2d35eaa5269a4b3d260296350_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e0941cf5a7f8eaddf9175c924561867
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
PeekNamedPipe
GetShortPathNameW
GetEnvironmentVariableW
GetVersionExW
CreatePipe
SetUnhandledExceptionFilter
SetErrorMode
DuplicateHandle
OpenMutexA
CreateMutexW
CreateEventA
FileTimeToLocalFileTime
HeapReAlloc
HeapCreate
HeapFree
HeapAlloc
RemoveDirectoryW
FindFirstFileW
FindNextFileW
TlsSetValue
TlsAlloc
GetProfileStringW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
SetFilePointer
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
CreateFileA
CloseHandle
GetLastError
WriteFile
RtlUnwind
VirtualFree
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
user32
DrawFrameControl
RegisterWindowMessageW
LoadCursorA
UnregisterHotKey
CreateMenu
DrawTextA
GetMessageTime
GetDlgCtrlID
KillTimer
GetSystemMenu
GetMenuItemInfoW
GetWindowTextA
ScrollWindow
FillRect
GetActiveWindow
CreatePopupMenu
GetSysColorBrush
AppendMenuA
CreateDialogIndirectParamA
PostMessageW
SetWindowsHookExA
IsDialogMessageW
SetClipboardData
SendDlgItemMessageA
CloseClipboard
EndDialog
OffsetRect
CheckRadioButton
GetClipboardData
SetForegroundWindow
BeginDeferWindowPos
ExitWindowsEx
EndDeferWindowPos
ole32
OleUninitialize
CoInitialize
CLSIDFromString
OleInitialize
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ