Static task
static1
Behavioral task
behavioral1
Sample
d1fa07c112a88cf9e96be2e0e3b35e8e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1fa07c112a88cf9e96be2e0e3b35e8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1fa07c112a88cf9e96be2e0e3b35e8e_JaffaCakes118
-
Size
150KB
-
MD5
d1fa07c112a88cf9e96be2e0e3b35e8e
-
SHA1
8c4c4061b882de1debd0aeaafa54e1cfd0e5e3cd
-
SHA256
1c14539d639221a89dd985a6f0e1adbdfdabcaec09c86a514dd5258877755e5f
-
SHA512
e3d0145f3e91eb848f6c5e764248ad90f553c485a5587820ae133549a58c0b9c66e5a97b6397ab7a3a1098b5fcaf92dcc315b901bced056615d337e61aa2201b
-
SSDEEP
3072:mDI+ycVYNCi+hRLGItbM50YC9aySqokz7beB+C8N8HB8+O8H6j:oycVYNRwRaIboTQay/7a2N8C+O8H6j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1fa07c112a88cf9e96be2e0e3b35e8e_JaffaCakes118
Files
-
d1fa07c112a88cf9e96be2e0e3b35e8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa61be8d2860218b89dd1ed66faa39c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsolePalette
GlobalFree
GlobalAddAtomA
GlobalAddAtomA
RaiseException
SetCommBreak
lstrcat
DeleteAtom
GetLastError
HeapCreate
VirtualAlloc
EnterCriticalSection
GetOEMCP
LoadLibraryExA
CloseHandle
GetStdHandle
IsBadCodePtr
LoadResource
GlobalUnlock
LocalFree
WriteProfileStringA
user32
AlignRects
ReleaseDC
GetClassNameA
GetForegroundWindow
GetWindowTextLengthA
GetActiveWindow
CloseWindow
GetFocus
GetWindowTextA
GetClassInfoExA
GetWindow
GetParent
EndPaint
GetDC
BeginPaint
IsIconic
ShowWindow
ValidateRect
DrawEdge
wsock32
WSAStartup
WSAAsyncGetServByPort
WSACleanup
WSAGetLastError
WSASetBlockingHook
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ