Static task
static1
Behavioral task
behavioral1
Sample
0f5f11c3b2aaaa7842cd35bc297e18ed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0f5f11c3b2aaaa7842cd35bc297e18ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f5f11c3b2aaaa7842cd35bc297e18ed_JaffaCakes118
-
Size
307KB
-
MD5
0f5f11c3b2aaaa7842cd35bc297e18ed
-
SHA1
35efb453f2f56379e7af895d5a0159ebe35319d6
-
SHA256
399d41dc33a976aa928e2c9478aeb7085d5913b307617bfebbebdc91c3d186ab
-
SHA512
55b1e8e9bbf519582b519143b260b8cbaea4866e11942167a0b7b0d4ba3ed7a11a5bdab5950449533b130dc04a219bc26dc9d3d79d4551a13d5bdd82ef0fa866
-
SSDEEP
6144:1ECJfc78RcULXzL70uexhOQpItIASSvJGYk6np1Xfmy9HL5s:yya8Wmwu+hOQSMzYNp1Xfdt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5f11c3b2aaaa7842cd35bc297e18ed_JaffaCakes118
Files
-
0f5f11c3b2aaaa7842cd35bc297e18ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
e925e2473adaf5b159b24125f7926231
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
HeapCreate
LoadLibraryA
GetComputerNameW
GetFileAttributesA
CreateFileA
ExitProcess
GetModuleHandleW
ReleaseMutex
GetCommandLineW
FindAtomW
GetSystemTime
GetTickCount
CloseHandle
ResetEvent
LocalFree
GetDiskFreeSpaceW
lstrlenA
GetTickCount
ReleaseMutex
user32
GetDlgItem
EndDialog
GetMenu
CallWindowProcA
CreateWindowExA
GetClientRect
DestroyCaret
GetCaretPos
GetClassInfoA
DispatchMessageA
FillRect
DrawStateA
CloseWindow
rasapi32
RasDialA
DwEnumEntryDetails
DwRasUninitialize
RasDeleteEntryA
DwCloneEntry
adsnt
DllGetClassObject
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ