Static task
static1
Behavioral task
behavioral1
Sample
7cddd12a96c2cca673e3b9d9f99313e8_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7cddd12a96c2cca673e3b9d9f99313e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
7cddd12a96c2cca673e3b9d9f99313e8_JaffaCakes118
-
Size
10.7MB
-
MD5
7cddd12a96c2cca673e3b9d9f99313e8
-
SHA1
09d24b12959d74bedbd5847f65278167db897e5a
-
SHA256
9e1bb3159b52f0c2f9d981901f3c25ee2ee1cbec417005027b9c3c512acfd9ce
-
SHA512
bec86eb828fc43e06a3f1c7e7be459c3d3beed98c147af3d19d13c03c1c5619b2343680a2347c187f8562908fc7dac59b76774cf504aca05c6b528fd9ae0c16a
-
SSDEEP
98304:E+Ue6dtwBDxK5MJJZpwOpk2meTDubtzekXU0DHpIr7yV2MDBarija4ke+pP:nUe3dK5M/TxdTDEtSOpIr+BDBade
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cddd12a96c2cca673e3b9d9f99313e8_JaffaCakes118
Files
-
7cddd12a96c2cca673e3b9d9f99313e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
57d15f9c7a58fefdbad4b7a6f381290b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
timeEndPeriod
timeBeginPeriod
ws2_32
WSAGetOverlappedResult
kernel32
WriteFile
WriteConsoleW
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
LoadLibraryA
LoadLibraryW
GetThreadContext
GetSystemInfo
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 215KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 454KB - Virtual size: 453KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 42KB - Virtual size: 42KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 63KB - Virtual size: 63KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 45B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 852KB - Virtual size: 852KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 529KB - Virtual size: 529KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 167KB - Virtual size: 166KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1018B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 759KB - Virtual size: 759KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ