Static task
static1
Behavioral task
behavioral1
Sample
8641ac8f886caa5c8fe975230963263b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8641ac8f886caa5c8fe975230963263b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8641ac8f886caa5c8fe975230963263b_JaffaCakes118
-
Size
201KB
-
MD5
8641ac8f886caa5c8fe975230963263b
-
SHA1
4937af213cd0b1ee5c22cd617a36f4f361d168fc
-
SHA256
c636b2415ba8f786389796e189ff1fd9eba65e0f9862aae435a8ac9d1c51da95
-
SHA512
c48dbb41319643a55388cbfe3140e1866895d6216c16023e0d886792d91cbace0531ad825be96b31b78db425dbe26b0a67b856322c510da2e544c2fcdaaf4ab5
-
SSDEEP
6144:LT0ynG57S7t9p9RItXICxXal8UnhNvkN3GSO:LT5oSZ9+xICW8OlkNxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8641ac8f886caa5c8fe975230963263b_JaffaCakes118
Files
-
8641ac8f886caa5c8fe975230963263b_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcd97adc021b3fdc418ff7c1642bfb91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
GetTickCount
SuspendThread
GetVersion
GetSystemDefaultLangID
GetCommandLineA
LocalSize
LoadLibraryExA
CompareFileTime
GetConsoleDisplayMode
HeapCreate
WaitForSingleObject
VirtualProtect
HeapReAlloc
CloseHandle
lstrlenA
InterlockedExchange
GetModuleHandleA
GlobalUnlock
WaitForMultipleObjects
GetConsoleCP
gdi32
CreatePalette
BeginPath
EngLineTo
FloodFill
GetMetaFileA
EqualRgn
GetMetaRgn
DeleteDC
CreateICA
GetStringBitmapA
GetRgnBox
GetTextColor
AbortPath
Ellipse
CreateFontA
Escape
DeleteObject
EndPath
GetFontData
rastapi
PortClose
DeviceConnect
DeviceListen
DeviceDone
AddPorts
dhcpsapi
DhcpAddServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ