Static task
static1
Behavioral task
behavioral1
Sample
d0851554ab297d19d63fb0bbfbb6a1e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0851554ab297d19d63fb0bbfbb6a1e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0851554ab297d19d63fb0bbfbb6a1e4_JaffaCakes118
-
Size
33KB
-
MD5
d0851554ab297d19d63fb0bbfbb6a1e4
-
SHA1
dd8e7e7be3c8cb75a69229299c6f83257fbbe5e2
-
SHA256
991c1cd60d3b192fc9997b585d200113dace86f891c7c661e1f10675c216a16e
-
SHA512
d0533b17501b687a008ea3e9514957b4b61fdc9380a8643a23d4990a0c41c0a83c47d5bb3a24272bbc1726b92a5d2c0ad27babf56646f1bb4e05a39b2b807e17
-
SSDEEP
384:N6DVDbWeVrwgsgjshHDAamXf84HCNWiNbHGuRWcXN:+WKrwBDAaYmdtWqN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0851554ab297d19d63fb0bbfbb6a1e4_JaffaCakes118
Files
-
d0851554ab297d19d63fb0bbfbb6a1e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
0957287b16f4d58ba4d8c06063bbd080
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW
user32
MessageBoxA
wsprintfW
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res Size: 4KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ