Static task
static1
Behavioral task
behavioral1
Sample
c17e1f33dd42a21c807aba5a4ab85da3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c17e1f33dd42a21c807aba5a4ab85da3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c17e1f33dd42a21c807aba5a4ab85da3_JaffaCakes118
-
Size
87KB
-
MD5
c17e1f33dd42a21c807aba5a4ab85da3
-
SHA1
4f361141c5732777c3c86890a929c7f357b72315
-
SHA256
510ea4029205a155d452cee49ad36a77fd20609452abc868e564a0cde0dfdf9e
-
SHA512
142699bd5e88161dbc0a5e3cf762b6ad6ac5abc789d59b92c7f499927c9d214d65c2874aa98b6548b7ac7ff4bf85e636c87678386f602da00159434f18f8cf88
-
SSDEEP
1536:/i53858h4TrKVMS/ft/GTaNCDZaknTDK3IhQtMoy/lDtW:Pu4aVM8ftCaN6xrgMoyto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c17e1f33dd42a21c807aba5a4ab85da3_JaffaCakes118
Files
-
c17e1f33dd42a21c807aba5a4ab85da3_JaffaCakes118.exe windows:4 windows x86 arch:x86
d9d489ca0c655624a9024a3b704311a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetFileSize
CloseHandle
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
GetACP
GetTickCount
GetStringTypeW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
EndPaint
PostQuitMessage
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
GetClientRect
DefWindowProcA
DestroyWindow
wsprintfA
BeginPaint
DrawTextA
gdi32
Rectangle
SetPixel
TextOutA
CreateBitmap
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
StrStrIA
StrRChrA
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ