Static task
static1
Behavioral task
behavioral1
Sample
dae78c0b6aea5bc178cd791a6f1c7fe2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dae78c0b6aea5bc178cd791a6f1c7fe2_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
dae78c0b6aea5bc178cd791a6f1c7fe2_JaffaCakes118
-
Size
2.9MB
-
MD5
dae78c0b6aea5bc178cd791a6f1c7fe2
-
SHA1
2a31b5a771e0749214b33bac867482ce966ff197
-
SHA256
37e1c09c957de9407fb977d32f7e07c08875695abfc4ae017f4ef7c406b001e2
-
SHA512
149919ba80a776b425c097eeb2fde2a92b9190af81e5d91a26446d647f7f1332211b517328204d12990816e6329bed83d15434301f1ba6439cbcfd9bc2b3a234
-
SSDEEP
49152:qoJrV2Dd85k1YCdptya507NUUWn043oHS3fTZYwVq1/xT3DDbw0TUqyd:rJrV2DdSNhS9Yw8yl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae78c0b6aea5bc178cd791a6f1c7fe2_JaffaCakes118
Files
-
dae78c0b6aea5bc178cd791a6f1c7fe2_JaffaCakes118.exe windows:4 windows x86 arch:x86
c822367a9504ef3caf3dc67fe3ebebe2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
BeginUpdateResourceA
CloseHandle
CopyFileA
CreateFileA
CreateSemaphoreA
DeleteFileA
EndUpdateResourceA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeLibrary
GetAtomNameA
GetFileSize
GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetTempFileNameA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
ReadFile
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UpdateResourceA
WaitForSingleObject
msvcrt
_fdopen
_read
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_filelengthi64
_fstati64
_iob
_isctype
_lseeki64
_onexit
_pctype
_setmode
_strnicmp
_vsnprintf
abort
atexit
fclose
fflush
fgetpos
fopen
fprintf
fread
free
fsetpos
fwrite
getc
localeconv
malloc
memchr
memcpy
memmove
memset
putc
setlocale
setvbuf
signal
strcat
strcmp
strcoll
strcpy
strftime
strlen
strtod
strxfrm
ungetc
user32
MessageBoxA
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 19KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE