Static task
static1
Behavioral task
behavioral1
Sample
adcf78ba1c03eefe473334010eecc7ff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
adcf78ba1c03eefe473334010eecc7ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adcf78ba1c03eefe473334010eecc7ff_JaffaCakes118
-
Size
223KB
-
MD5
adcf78ba1c03eefe473334010eecc7ff
-
SHA1
f529ac1520dd25f5c1726bb090ca59bfb2526b71
-
SHA256
26e3e2228b55257b417711e323547d56bbe561e4b188df638a2565b84a29e1bd
-
SHA512
2ed7d3476dce62cb6b113de521daee045741e04f6989f2b37a4b655ff303d03bf18c9bc6b2abfe49f489e523088f329f74ab837de99526cc55d37d3f487960f8
-
SSDEEP
3072:okwmmLJQdDZIzVrWnC9xQEVFxVG4XtyR7quliBDN9CozESdmM+:twvLJ2Yhd/V3U48dwRJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adcf78ba1c03eefe473334010eecc7ff_JaffaCakes118
Files
-
adcf78ba1c03eefe473334010eecc7ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
ef26971c3c12dfdef8359abe9bf6986d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CloseHandle
WriteProcessMemory
GetStdHandle
GlobalLock
GetProcessHeap
EnterCriticalSection
GetOEMCP
DeleteAtom
ExitThread
CreateHardLinkA
LoadLibraryExA
GetTapeStatus
RaiseException
GlobalFlags
GetCommState
FindAtomA
GlobalCompact
GlobalFree
GetProfileStringA
ClearCommBreak
user32
RegisterClassA
GetWindowTextA
GetParent
GetActiveWindow
ValidateRect
GetWindowTextLengthA
BeginPaint
GetForegroundWindow
GetWindow
ShowWindow
GetClassNameA
EndPaint
GetDC
IsIconic
GetClassInfoExA
GetFocus
ReleaseDC
DrawEdge
CloseWindow
wsock32
WSACleanup
WSAAsyncSelect
WSAIsBlocking
WSAGetLastError
WSAStartup
dot3api
Dot3SetProfile
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ