Static task
static1
Behavioral task
behavioral1
Sample
d1eeb86a25783d72f3006dbb4dba2e54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d1eeb86a25783d72f3006dbb4dba2e54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1eeb86a25783d72f3006dbb4dba2e54_JaffaCakes118
-
Size
142KB
-
MD5
d1eeb86a25783d72f3006dbb4dba2e54
-
SHA1
50355f994b21739fd42c14b4153399fb86a7e1f7
-
SHA256
5557b125e8fbfa0d4a4e91fcddcb524f83f995d946444060229d0a6c1ce25ab6
-
SHA512
2a669899a0efd1e264df69bcef56a5de1c6e74c6b6d51750db85c1bae16250ebdc5df6c80512766232fdfcdf91f081db0e5555b0d8e039860534ab1497c6c8b0
-
SSDEEP
3072:XVODgIBN9UKG3OKCymCDYn/AF860roa7oPydMxPzgKuE5jwiq+XUJ:F4Lc3DE40rtoz5gjOqJJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1eeb86a25783d72f3006dbb4dba2e54_JaffaCakes118
Files
-
d1eeb86a25783d72f3006dbb4dba2e54_JaffaCakes118.exe windows:7 windows x86 arch:x86
ca390ce10565e649211dc0b012ffbcdb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetCurrentProcess
GetModuleHandleW
GetCurrentProcessId
GetCommandLineA
GetCommandLineW
LocalAlloc
GetACP
GetModuleFileNameA
GetTickCount
FormatMessageW
QueryPerformanceCounter
GetProcessHeap
LocalFree
FormatMessageW
GetACP
GetModuleHandleA
GetCommandLineA
LocalFree
GetTickCount
GetCurrentThreadId
LocalAlloc
user32
GetDC
GetSystemMetrics
PostMessageW
GetDC
GetDC
GetSystemMetrics
DefWindowProcW
CreateWindowExW
ReleaseDC
GetDlgItem
SetTimer
ReleaseDC
LoadIconW
GetMessageW
GetDC
GetSystemMetrics
SetTimer
DestroyWindow
GetWindowRect
SetTimer
ShowWindow
ntdll
NtAllocateVirtualMemory
Sections
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ