Static task
static1
Behavioral task
behavioral1
Sample
662537d0b9e86f07adeaa83bd690ee54_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
662537d0b9e86f07adeaa83bd690ee54_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
662537d0b9e86f07adeaa83bd690ee54_JaffaCakes118
-
Size
396KB
-
MD5
662537d0b9e86f07adeaa83bd690ee54
-
SHA1
807209443cdc936ef730c7028d3ad4af45a21420
-
SHA256
d504c3b38361094beeab292b43f721d2daa5976f0a25e2d6ab917d4c11f42f3e
-
SHA512
13fe400bc5111885843bc0ba6b8564bc5c1bc3ca4f002e2a8d7526b00ddaa4a7e58444f4a68f521b9130bd93fdde2c1a1428a84ed0c01ff1861ac2dbc08260a4
-
SSDEEP
6144:GpBQGk2gTP4DYqyj7dDE71fqmBSqQ3sjaBkYRMro5kfd1mOcsZnMTT3EApm5zj8O:GpRk2gLKyjm758q8p8usZMf3Nmpj9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662537d0b9e86f07adeaa83bd690ee54_JaffaCakes118
Files
-
662537d0b9e86f07adeaa83bd690ee54_JaffaCakes118.exe windows:5 windows x86 arch:x86
d2b7decb10ede647fef898aec6ff8bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
RaiseException
GetStdHandle
GetModuleFileNameA
QueryPerformanceFrequency
LZInit
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
InterlockedIncrement
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
user32
SendMessageW
DestroyWindow
SetDlgItemTextW
EndDialog
GetDlgItem
GetSysColor
GetWindowRect
GetClientRect
ScreenToClient
GetSubMenu
EnableMenuItem
ClientToScreen
TrackPopupMenuEx
DestroyMenu
EnableWindow
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect
odbc32
SQLGetTypeInfoA
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ