Static task
static1
Behavioral task
behavioral1
Sample
cde991d6f0632e942b5571a75bc59ef7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cde991d6f0632e942b5571a75bc59ef7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cde991d6f0632e942b5571a75bc59ef7_JaffaCakes118
-
Size
968KB
-
MD5
cde991d6f0632e942b5571a75bc59ef7
-
SHA1
62ab7e155be129c786d6c9749e4d1c04695947ca
-
SHA256
3ccbf55ff415811820dfd7e5859bb2cc966eb1aa86fe4765cda7906c7344774a
-
SHA512
3fbfaa78d8d48054955ab13269d68626fe681d830eb285a8befa7fa8aa796615e40b1fd15530332bc305c7a300ca37570a33468d9925d47dc1eeb90b89892614
-
SSDEEP
24576:thPJBsYsmYzFMedTFpQk8wSPllunNJU7qd7LN:HxBsYsTzFN518woungWhL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde991d6f0632e942b5571a75bc59ef7_JaffaCakes118
Files
-
cde991d6f0632e942b5571a75bc59ef7_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7d47a0bea8bb54c8e07b960af6b4a71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamOpen
ws2_32
recvfrom
kernel32
GetModuleHandleA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetClientRect
MessageBoxA
gdi32
TextOutA
msimg32
TransparentBlt
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
RegisterTypeLi
comctl32
_TrackMouseEvent
wininet
InternetOpenA
Sections
CODE Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 986KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 551KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp1 Size: 956KB - Virtual size: 954KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE