Static task
static1
Behavioral task
behavioral1
Sample
d039af2976fdb4ad0660e5f44a41c116_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d039af2976fdb4ad0660e5f44a41c116_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d039af2976fdb4ad0660e5f44a41c116_JaffaCakes118
-
Size
2.9MB
-
MD5
d039af2976fdb4ad0660e5f44a41c116
-
SHA1
b1fd81a89649a4d959c851424649734de4e9d6c3
-
SHA256
15784aee86aa6572025793976fc7367b38c5c1314fd8cbee417ca10e253d4df0
-
SHA512
05601629d3f0d5344e570a9fc90a63d64a4faab46639f5b91e43bd5136270a194fe72f49b026582d831b3faa6e1df22acd379821bb3d689b303b85d20ce253d8
-
SSDEEP
49152:NQ6XhW+NqX/s9hGN70CUBpJE2wZByBilyqHTBAChcPrpzjOqK//iv55s:ekWXX/oGN70CUBGoBilVVDadJK//iv5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d039af2976fdb4ad0660e5f44a41c116_JaffaCakes118
Files
-
d039af2976fdb4ad0660e5f44a41c116_JaffaCakes118.exe windows:5 windows x86 arch:x86
b0c1529ebb1076344cff1debaf00891c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalDeleteAtom
GetCommTimeouts
GetDiskFreeSpaceExA
UpdateResourceA
GlobalDeleteAtom
GlobalSize
VirtualFree
lstrcmpiA
FileTimeToLocalFileTime
OpenThread
ResumeThread
GetSystemDirectoryA
QueryDosDeviceA
GetProcessHeap
GetProcessWorkingSetSize
WaitForMultipleObjectsEx
GetVersionExA
OpenSemaphoreA
DuplicateHandle
GetFileSize
SetInformationJobObject
GetTimeFormatA
GetFullPathNameA
FillConsoleOutputAttribute
DeleteTimerQueueEx
SizeofResource
LoadResource
ReadConsoleOutputCharacterA
SetFileApisToANSI
GetEnvironmentStringsA
GetEnvironmentVariableA
TransmitCommChar
OpenMutexA
ResetEvent
FlushFileBuffers
GetLocaleInfoA
LZClose
GetConsoleCommandHistoryLengthA
GetProcessHandleCount
VirtualAllocEx
GetPrivateProfileStringA
lstrlenA
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 20.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ