Static task
static1
Behavioral task
behavioral1
Sample
0f940aea67eb8e9c744bbf5c1d5a2ed7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f940aea67eb8e9c744bbf5c1d5a2ed7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f940aea67eb8e9c744bbf5c1d5a2ed7_JaffaCakes118
-
Size
182KB
-
MD5
0f940aea67eb8e9c744bbf5c1d5a2ed7
-
SHA1
a7cf98840b2cc443171cbf0bff42520f9a365ad9
-
SHA256
68c94a062137bdc6c053b5daad19284fd6daa9ba9d24e17a0dea09a9424c50b3
-
SHA512
5a96d951d0f2308c6f285ba0997ab4d183900faa83a3ff7894eabb94211d304dc917bc9d4067c57cddf7db7cfc0941d411f8aa47e20b3b738c982b4371d805e3
-
SSDEEP
3072:DsbG5wRTJuXQ4d/JlzTcptpLs5HC++3gyxpqYHGmCr:QbGWtJ4dBl8ptpLkyxpxg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f940aea67eb8e9c744bbf5c1d5a2ed7_JaffaCakes118
Files
-
0f940aea67eb8e9c744bbf5c1d5a2ed7_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e54ea7ba9da16921f1213b91853fc36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageWidth
GdipDisposeImage
shlwapi
PathGetArgsW
StrDupW
PathSkipRootW
PathIsUNCW
SHRegGetValueW
PathFindFileNameW
kernel32
SetLastError
WideCharToMultiByte
VirtualProtect
SearchPathW
GetCalendarInfoW
GetFileInformationByHandle
InterlockedExchange
lstrcmpiW
DuplicateHandle
GetLastError
VirtualQuery
FreeLibrary
GetCurrentProcess
ExitProcess
CreateDirectoryW
GetModuleFileNameW
OutputDebugStringA
LocalFree
EnumResourceNamesA
OutputDebugStringW
GetModuleHandleW
lstrlenW
MultiByteToWideChar
GetCurrentDirectoryW
GetModuleHandleA
InitializeCriticalSection
LocalAlloc
GetProcAddress
GetFileAttributesW
GetCurrentThreadId
SetEnvironmentVariableW
GetProcessId
Sleep
ole32
CoGetDefaultContext
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ