Static task
static1
Behavioral task
behavioral1
Sample
1894098e4be39024ecaeba8821cfbb8e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1894098e4be39024ecaeba8821cfbb8e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1894098e4be39024ecaeba8821cfbb8e_JaffaCakes118
-
Size
74KB
-
MD5
1894098e4be39024ecaeba8821cfbb8e
-
SHA1
99f51ccc251d67aa4ea141089f1cf4dba9200966
-
SHA256
64072cc5ab399ded7d759e268ba2423c904bde4279c92c627c9df19c01d08ba7
-
SHA512
bddb09410e9f658a458a52362aa1a33aa9df3da97a0809a93b9f5c7c009da1fe30f7be5a6678e1527f54f31e846f1ed182cd6459b019f98a8c09f7bb8ff1614a
-
SSDEEP
1536:LP7LMfBAAOdskIYBcGTC/vicG4/51BXoufr7NPPzP:L74B+dfCYovi34/5nXHzP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1894098e4be39024ecaeba8821cfbb8e_JaffaCakes118
Files
-
1894098e4be39024ecaeba8821cfbb8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec0976d95f75e3eaebe9e343033ca982
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapFree
GetModuleHandleW
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
WideCharToMultiByte
RtlUnwind
HeapAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
SetFilePointer
IsProcessorFeaturePresent
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
IsValidLocale
GetProcAddress
hlink
HlinkCreateShortcut
cmdial32
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomEntryDlg
CmCustomDialDlg
AutoDialFunc
RasCustomHangUp
RasCustomDialDlg
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oQ Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ap Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.FfYnl Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.AyQRc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SJVlXd Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rHdPs Size: 1024B - Virtual size: 759B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ