Static task
static1
Behavioral task
behavioral1
Sample
29d726e14546f1e59c3a3dea6f79e2c3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29d726e14546f1e59c3a3dea6f79e2c3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29d726e14546f1e59c3a3dea6f79e2c3_JaffaCakes118
-
Size
397KB
-
MD5
29d726e14546f1e59c3a3dea6f79e2c3
-
SHA1
a1d7a41e6d754ffd747c96b52709b6dde465fbbb
-
SHA256
8a442aac0e8c89c6a560982039afdc5ea9198275ff48b8a397bb56dd2f091059
-
SHA512
a1ffcee5d6aa5b55b4fd284a03821053f4e9fd8da75a079676610c6045f329d15e5574aff1cc31b2b142f07b634a118eda4d253adc59e5d6d378717b347de1fa
-
SSDEEP
6144:UpVmFuhsO8TTLjWyFo4xuyvaRi26aUjXt8ohNBIj77jVTUaumcK+yJY:gCu6TzKym4xZajVU+ohLIHNTUm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d726e14546f1e59c3a3dea6f79e2c3_JaffaCakes118
Files
-
29d726e14546f1e59c3a3dea6f79e2c3_JaffaCakes118.exe windows:5 windows x86 arch:x86
4058b755640407d72b28a3ed51bfe6a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetProcAddress
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
Sleep
DeleteFileW
GetModuleHandleW
GetLastError
LocalFree
LocalAlloc
ExitProcess
QueryPerformanceFrequency
RaiseException
GetTickCount
GetCurrentThreadId
DeleteCriticalSection
GetThreadLocale
InterlockedExchange
SetLastConsoleEventActive
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA
user32
ShowCursor
SetRectEmpty
DestroyIcon
GetTopWindow
GetParent
GetWindow
SetTimer
GetWindowRect
SetCapture
PostMessageW
KillTimer
GetFocus
TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect
odbc32
SQLGetTypeInfoA
Sections
.text Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ