Static task
static1
Behavioral task
behavioral1
Sample
8dd75bbe09d98c4e03fc17e996bcf962_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8dd75bbe09d98c4e03fc17e996bcf962_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dd75bbe09d98c4e03fc17e996bcf962_JaffaCakes118
-
Size
116KB
-
MD5
8dd75bbe09d98c4e03fc17e996bcf962
-
SHA1
81676184ff3576c03d39f2821b12a54803c6dc89
-
SHA256
24284929470aabaf14ff51f1d43a3f90417155712ef1d018fd9c0e5b26c33b41
-
SHA512
a7a8284adabbdc09df3a614caa8486813d85922dc1a616c2a7237d163064c63e1fd383a372fd3b2a93c880d21f14fb275dadddbe901fa22fc5c70fe6a9063781
-
SSDEEP
3072:/iYkyN0hRQjSN2ZQYE0CQb41Q0AsMIPo/SqrsIZE:KzO0bQ62qYE0CQb4o+IsU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dd75bbe09d98c4e03fc17e996bcf962_JaffaCakes118
Files
-
8dd75bbe09d98c4e03fc17e996bcf962_JaffaCakes118.exe windows:5 windows x86 arch:x86
109b1ddf425010c549384c84f23342f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetEnvironmentStringsW
GetVersionExA
GetCommandLineA
GetCurrentProcessId
CreateEventA
GetPriorityClass
GetModuleHandleA
GetStdHandle
GetCurrentThread
CreateSemaphoreA
GetTickCount
GetEnvironmentStrings
IsDebuggerPresent
VirtualAlloc
CreateMutexA
GetProcAddress
GetStartupInfoA
user32
GetWindowDC
LoadCursorA
LoadCursorFromFileA
ReleaseDC
SetWindowTextA
LoadIconA
gdi32
GetRasterizerCaps
GetTextColor
GetTextMetricsA
AbortDoc
SetTextAlign
shlwapi
StrFormatByteSizeW
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
memcpy
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ