Static task
static1
Behavioral task
behavioral1
Sample
66b1df93214f527711b7ff5e6a924b54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66b1df93214f527711b7ff5e6a924b54_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66b1df93214f527711b7ff5e6a924b54_JaffaCakes118
-
Size
112KB
-
MD5
66b1df93214f527711b7ff5e6a924b54
-
SHA1
1f62d1d04ec4040a5708278dbf4b022f74c1a2a6
-
SHA256
b778732b419eb8396e793536490d5b3a9047b24df2299c1438d7993b6d3ca349
-
SHA512
2857619ca8e091690d0a515c2c6070a3810e92ad824fce9cec3726d9c6b8cb5dea9c879bc07ebfb522dd57bfa10af2c45d952a7c590093917b96a30b5b83cd4a
-
SSDEEP
3072:sawFmjT4E0HMCeB6EUgJxW0+sCDD+l1eOu38cfLQ:sa+ANAgHu+TeOez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66b1df93214f527711b7ff5e6a924b54_JaffaCakes118
Files
-
66b1df93214f527711b7ff5e6a924b54_JaffaCakes118.exe windows:5 windows x86 arch:x86
7716da3846f069551c4c1672676ff405
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCurrentDirectoryA
GetCurrentThreadId
CloseHandle
GlobalFree
GlobalUnlock
WriteFile
GetCurrentProcess
ExitProcess
GetProcAddress
GetModuleHandleA
VirtualAlloc
GetLastError
EnterCriticalSection
GetSystemTime
CreateMutexA
GetVersionExA
CreateEventA
GetStartupInfoA
GetLocalTime
GetCurrentProcessId
GetModuleFileNameA
CreateFileW
TlsAlloc
user32
GetSystemMetrics
ReleaseDC
GetClientRect
GetForegroundWindow
GetDC
gdi32
SelectObject
GetObjectA
DeleteObject
CreateCompatibleBitmap
StretchBlt
GetObjectType
CreateCompatibleDC
BitBlt
msvcrt
_initterm
__dllonexit
_controlfp
__set_app_type
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
_onexit
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ