Static task
static1
Behavioral task
behavioral1
Sample
204a8904f50a26e7e47592dc80950b35_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
204a8904f50a26e7e47592dc80950b35_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
204a8904f50a26e7e47592dc80950b35_JaffaCakes118
-
Size
273KB
-
MD5
204a8904f50a26e7e47592dc80950b35
-
SHA1
608641926092a3de30115d1e5d987c3ab9efe8b6
-
SHA256
1822d18569ae3a548b619bb4caa9f37c9f32ee3e1a92986fedf39e969f86c68a
-
SHA512
bf168d821d5c026acec1b59ad3c5e84762c9e386fa11bc07e7769668da646eee4b09e0100bb681fdccf30cdf2e2441245098e5e8c408d76b02dce0dad62e0fb2
-
SSDEEP
6144:zG7y9O8L4iTqogpOmn1dtj14SESY8YYY8WYYYYYYYYYYYhnJA7zE/EEEE9EEEEsu:+8LDTdmnpNFnD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 204a8904f50a26e7e47592dc80950b35_JaffaCakes118
Files
-
204a8904f50a26e7e47592dc80950b35_JaffaCakes118.exe windows:5 windows x86 arch:x86
2910eba292fc8b56ed4589aedccb810d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FreeLibrary
FreeEnvironmentStringsA
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
HeapReAlloc
GetStringTypeW
IsValidLocale
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
GetModuleHandleW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
IsProcessorFeaturePresent
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
LoadLibraryW
user32
UpdateWindow
ShowWindow
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ