Static task
static1
Behavioral task
behavioral1
Sample
cee86f225d3661bc532696ca4e0cd121_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cee86f225d3661bc532696ca4e0cd121_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cee86f225d3661bc532696ca4e0cd121_JaffaCakes118
-
Size
342KB
-
MD5
cee86f225d3661bc532696ca4e0cd121
-
SHA1
0a03c8611b3c58f203ba5fe4c7148d92edd84742
-
SHA256
2e1b38ff7e6fe43849ad8982302df82cfb42b5672963988692348ac95ae68085
-
SHA512
101ded16d0c494498d36ae60a262f69c369ac7f56e70ef20b8392bc53680b60db5f90abe2777a1fb7003846a66e598643b90e6e15385677458ba60b2c485a0b2
-
SSDEEP
6144:WLmtMYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gUzdx:WBYvDsakbClM2pxYB3CuM/xLdx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cee86f225d3661bc532696ca4e0cd121_JaffaCakes118
Files
-
cee86f225d3661bc532696ca4e0cd121_JaffaCakes118.exe windows:4 windows x86 arch:x86
8af2ddfc9265107f81d5535044c7bd0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
CreateFileMappingA
IsBadReadPtr
IsDebuggerPresent
CreateEventA
GetConsoleCP
FreeEnvironmentStringsA
GlobalLock
CreateMailslotA
CloseHandle
HeapCreate
FindClose
CreateFileA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError
user32
GetDC
IsMenu
GetIconInfo
SetFocus
GetDlgItem
GetDlgItemTextA
DialogBoxParamA
DispatchMessageA
GetListBoxInfo
EndDialog
GetMessageA
RedrawWindow
CheckMenuItem
DrawIconEx
uxtheme
CloseThemeData
DrawThemeIcon
GetThemeColor
EnableTheming
GetThemeMetric
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ