Static task
static1
Behavioral task
behavioral1
Sample
8dc08935b3dd8e640ff3c1479e89935c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8dc08935b3dd8e640ff3c1479e89935c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dc08935b3dd8e640ff3c1479e89935c_JaffaCakes118
-
Size
326KB
-
MD5
8dc08935b3dd8e640ff3c1479e89935c
-
SHA1
96af2c4e67a984c9cf538ed1bf8d74dec79ef1f6
-
SHA256
859f3494e381be7ed5091125c0ca9b35a77213804d4f0db8e05ba6c1c98b186d
-
SHA512
e9e6d8d7191949416268575c9f0834950573361c17f6d41e869d92f9e493d7e765808396a12ff676a37218727974fa956993f26da9e2a55d781fce8ff3060d38
-
SSDEEP
6144:FQ8VmaYkqueerwVf4ODpxmJOMJoqcd1BqCoAeLJHwkNvW6EzG/k3avRDzHDs:28VmamxDpopBcd1BqNAeLJQkpW6EKMww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dc08935b3dd8e640ff3c1479e89935c_JaffaCakes118
Files
-
8dc08935b3dd8e640ff3c1479e89935c_JaffaCakes118.exe windows:4 windows x86 arch:x86
440a6a6c8fe5c23610e6d8392c101e99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetModuleHandleA
GlobalLock
ReleaseMutex
GetLastError
VirtualFree
TerminateThread
ResetEvent
TlsFree
LocalSize
CreateEventA
OpenMutexA
HeapSize
GetTempFileNameA
HeapFree
HeapAlloc
ExitProcess
Sleep
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
user32
LoadStringA
LoadCursorA
RegisterClassA
gdi32
DeleteObject
ole32
CoCreateInstance
CoInitialize
psapi
GetModuleBaseNameA
msvfw32
DrawDibStart
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 625KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE