Static task
static1
Behavioral task
behavioral1
Sample
d1df88a6599ab3d0272276ef9946947b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1df88a6599ab3d0272276ef9946947b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1df88a6599ab3d0272276ef9946947b_JaffaCakes118
-
Size
291KB
-
MD5
d1df88a6599ab3d0272276ef9946947b
-
SHA1
e31a128c44c37531f261b3f0ceab22d8302e24ac
-
SHA256
e70fbcb2a9db7a6125b87c8aa5574da28b51832eb0765b09f0ac06db2471cd48
-
SHA512
58a28c767a9d8e9864fa45c8a3fc262abeffd062341314ad67e79764628c7b2575ecbaa78f89e1da7bf5040d9abef4bfabe3b24e7b7b4e38351adb70d835a907
-
SSDEEP
6144:DdscsZDCBXj6feOHuoZ7LUHO17FTZBs7Jj8IcY8oWkICpk7r1mhXFYk1S0z8EwOG:z6WRmP9FTPId8FCa7r1mhqX05SF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1df88a6599ab3d0272276ef9946947b_JaffaCakes118
Files
-
d1df88a6599ab3d0272276ef9946947b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9b22ff606f8050b31e8bdce352a0f9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalReAlloc
GetTempPathA
WriteFile
CloseHandle
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
GlobalAlloc
GetModuleFileNameA
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
CreateDirectoryA
FindClose
user32
wsprintfA
MessageBoxA
CharLowerA
shell32
ShellExecuteExA
advapi32
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ