Static task
static1
Behavioral task
behavioral1
Sample
a51cfa7fe92697594ee5da17df0b3fa6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a51cfa7fe92697594ee5da17df0b3fa6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a51cfa7fe92697594ee5da17df0b3fa6_JaffaCakes118
-
Size
416KB
-
MD5
a51cfa7fe92697594ee5da17df0b3fa6
-
SHA1
5c0cf163d8f12ef3bc27c1c34ae4256e27e0f339
-
SHA256
238afca72167525f3a186be540a60f0e99768b95fac5ff18a90d314b7ca95d4e
-
SHA512
a0cacb5d638197099768ed6db1e5f92b6e76127fbb08f8a6fb49144f96f36e75f3de36378a2085b8bb3a7ed360c58a15e59fe60bc2911e1d005964c6b9360526
-
SSDEEP
6144:FgEMLsRSki4DQ45C9VSXhE6jDzOXwdrri/TS4IHg/7NMxuWcXZGZ8:Fg+64MP0RtO66/TS4UYixlfZ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a51cfa7fe92697594ee5da17df0b3fa6_JaffaCakes118
Files
-
a51cfa7fe92697594ee5da17df0b3fa6_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f2df7257758bf2707e2911007001ebd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount
user32
GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow
Sections
.text Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dyamarC Size: 360KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dyamarD Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.demonio Size: 4KB - Virtual size: 4KB
.demonio Size: 4KB - Virtual size: 4KB
.demonio Size: 4KB - Virtual size: 4KB
.demonio Size: 4KB - Virtual size: 4KB
.demonio Size: 4KB - Virtual size: 4KB