Static task
static1
Behavioral task
behavioral1
Sample
0fa08a3fe543a9189076d072078a6f4b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0fa08a3fe543a9189076d072078a6f4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0fa08a3fe543a9189076d072078a6f4b_JaffaCakes118
-
Size
56KB
-
MD5
0fa08a3fe543a9189076d072078a6f4b
-
SHA1
681382a5b8f796bb3a9080d41ae288a42adb358b
-
SHA256
e64815ed0e3d92370fd111a0adaaf4d9314e4d32c7f059ca61d333baa041f1b0
-
SHA512
cc4a91d425d0c4afa28e10848a2b4bda1efd4b37069bc3cde4af563ab607078c9e0c9b84b8b65fa340bcf0433699e5cd244c10f9298b5dc42448eb215a85806c
-
SSDEEP
1536:HrstWgOUQPqoL+yZ0iBti77InHkP2JLt+cLd/:L4WgyHyyJBti77n+hRd/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa08a3fe543a9189076d072078a6f4b_JaffaCakes118
Files
-
0fa08a3fe543a9189076d072078a6f4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
64696320056ef319486d74ca618ea22f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetDriveTypeA
GetLastError
GetStdHandle
LockResource
VirtualProtect
GlobalDeleteAtom
SetConsoleOutputCP
InterlockedExchange
LoadLibraryExA
HeapCreate
GlobalFree
GetLocaleInfoA
GlobalUnlock
GetACP
RaiseException
Sleep
FoldStringA
CloseHandle
SetErrorMode
EnterCriticalSection
user32
DrawEdge
BeginPaint
ReleaseDC
CharToOemBuffA
SetForegroundWindow
GetMenuItemInfoA
EndPaint
GetActiveWindow
ClipCursor
GetWindowTextA
GetWindow
GetCursorPos
GetFocus
GetClassNameA
GetParent
IsIconic
ValidateRect
DrawTextA
ShowWindow
version
VerInstallFileA
VerFindFileA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ