Static task
static1
Behavioral task
behavioral1
Sample
d09336ae3ab4ba4e2d24bf5302bbb516_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d09336ae3ab4ba4e2d24bf5302bbb516_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d09336ae3ab4ba4e2d24bf5302bbb516_JaffaCakes118
-
Size
43KB
-
MD5
d09336ae3ab4ba4e2d24bf5302bbb516
-
SHA1
a0db9f40a6a3eeeaa0b046d974c4fdef775b5134
-
SHA256
56cb8163b6641f8b8d96067b9624b73cc32ccdaa2abb561907040b730d8ed33f
-
SHA512
30dc9ed154135e84184b8daa89d15a99138520fd2da9e02a595dc5fcf3a2f9cb90074563c8039e856904ee835d944ba41438461030657e14d30c2ae377f4f1a4
-
SSDEEP
768:kZM0qEtZlte/uZtAnvtUtMAkbrTP3WIkzNwYZd0adqcVnF7pqAaVx2iTu2w:+qwZG/uZe2tMHbHxdoW23nt2x2e9w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d09336ae3ab4ba4e2d24bf5302bbb516_JaffaCakes118
Files
-
d09336ae3ab4ba4e2d24bf5302bbb516_JaffaCakes118.exe windows:1 windows x86 arch:x86
51992fbb6bb589fe57a7fc33eedc745f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConnectNamedPipe
CreateDirectoryW
CreateEventW
DisconnectNamedPipe
EndUpdateResourceA
ExitProcess
GetConsoleScreenBufferInfo
GetEnvironmentStrings
GetPrivateProfileSectionW
GetTempPathW
GetUserDefaultLangID
GetVersion
GetVersionExW
GetVolumeInformationA
GlobalGetAtomNameW
GlobalUnfix
HeapCompact
LeaveCriticalSection
MoveFileA
OpenEventA
OpenSemaphoreA
OutputDebugStringW
ReadConsoleOutputCharacterA
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetFileAttributesW
WriteFileGather
_llseek
user32
BroadcastSystemMessage
CascadeWindows
CharNextA
CopyIcon
DdeImpersonateClient
DdeQueryConvInfo
DdeUnaccessData
DefFrameProcW
DestroyAcceleratorTable
DestroyCursor
DlgDirListA
DlgDirListW
GetClipboardOwner
GetCursorInfo
GetScrollRange
GetSysColorBrush
GetWindowModuleFileNameA
IMPGetIMEA
IsCharUpperA
IsDialogMessage
OpenIcon
RealChildWindowFromPoint
RegisterClassA
SendMessageCallbackW
SetMessageQueue
TabbedTextOutW
UnregisterClassA
wvsprintfA
gdi32
AbortDoc
AngleArc
AnimatePalette
CreateDIBPatternBrushPt
CreatePalette
CreateScalableFontResourceW
EnumFontFamiliesA
EnumFontFamiliesW
GdiComment
GdiPlayScript
GetBitmapBits
GetBrushOrgEx
GetMapMode
GetMetaRgn
GetStockObject
GetTextColor
GetTextExtentPoint32A
GetTextFaceW
PathToRegion
Polygon
SetDeviceGammaRamp
SetPolyFillMode
SetROP2
SetSystemPaletteUse
SetTextCharacterExtra
StartDocA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE