Static task
static1
Behavioral task
behavioral1
Sample
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118
-
Size
168KB
-
MD5
f0dbcd3c1585b55c99428780fa74d24d
-
SHA1
542e8e0c2ac9a433c4a9838d9de1517edc0e05cb
-
SHA256
063e2921799de8768c47a43ddb6e231750ea1cccce23251783e4a4e6d620c4c3
-
SHA512
524729103085d754f520e3edd5690cc9daefec2c03f56d25c94c3a1f71bd91ba95ca8d24797e92634c28b8f2775b51995d7a20c9db68424a4b227965d31d314b
-
SSDEEP
3072:PFh2I8BLRpR6UToZUCJ+9qo6lz6ffwduXn5ifcynlT7rlLr6W1/oeyHNW3jf1Zy+:PFP8BVpsZn9uX5ifcy5Jr6WxZytU1ZCO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118
Files
-
f0dbcd3c1585b55c99428780fa74d24d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dc101cb86049236b9ee5900082b9163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GetTapeStatus
GetModuleHandleA
ClearCommError
GetCPInfo
EnumResourceNamesA
ExitProcess
ExitProcess
LCMapStringW
LCMapStringA
GetProcAddress
user32
GetWindowInfo
MessageBoxW
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ