Static task
static1
Behavioral task
behavioral1
Sample
4e3a4fef0901b98527c4ca66bd878ef0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4e3a4fef0901b98527c4ca66bd878ef0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
4e3a4fef0901b98527c4ca66bd878ef0_JaffaCakes118
-
Size
608KB
-
MD5
4e3a4fef0901b98527c4ca66bd878ef0
-
SHA1
60338c8e565cd8cf341aba70e25f3e536733916c
-
SHA256
516d8ce177b7d56461e3ed9bcbe16807bcf1360d7622f8ecb61dc0899c5e1513
-
SHA512
1d5e2caf0ec3c5baec84d62c49166065cfca41b8d45a8b0e3fbff93ce46902216d726e8bcef258604034c86b4ae6b4db23a13a18f161a34aef4916c891d4a27f
-
SSDEEP
12288:kBB+S1QfS0FUdCTzhlx+Wp/9h5STuilpdlKPVac5:ayf4dC1l9h5SyilblSVac5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e3a4fef0901b98527c4ca66bd878ef0_JaffaCakes118
Files
-
4e3a4fef0901b98527c4ca66bd878ef0_JaffaCakes118.exe windows:5 windows x86 arch:x86
fe81c9d2bb9dc3dbdd044d9be4439037
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
rtm
BestMatchInTable
odbc32
SQLGetDescRec
SQLGetDescRecA
SQLGetDescRecW
SQLGetDiagField
SQLGetDiagFieldA
SQLGetDiagFieldW
SQLGetDiagRec
SQLGetDiagRecA
SQLGetDiagRecW
SQLGetEnvAttr
SQLGetFunctions
SQLGetInfo
SQLGetInfoA
SQLGetInfoW
SQLGetStmtAttr
SQLGetStmtAttrA
SQLGetStmtAttrW
SQLGetStmtOption
SQLGetTypeInfo
SQLGetTypeInfoA
SQLGetTypeInfoW
SQLMoreResults
SQLNativeSql
SQLNativeSqlA
SQLNativeSqlW
SQLNumParams
SQLParamData
SQLParamOptions
SQLPrepare
SQLPrepareA
SQLPrepareW
kernel32
ReadFile
GetLastError
GetWindowsDirectoryA
RtlUnwind
FlushConsoleInputBuffer
GetConsoleFontInfo
GetConsoleFontSize
SetCommMask
SetConsoleTitleA
GetWriteWatch
CreateFileA
duser
AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
DUserBuildGadget
DUserCastClass
DUserCastDirect
DUserCastHandle
DUserDeleteGadget
DUserFindClass
DUserRegisterStub
DUserBuildGadget
DUserCastClass
DUserCastDirect
DUserCastHandle
DUserDeleteGadget
DUserFindClass
ksuser
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
KsCreateAllocator
Sections
.text Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 206KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE