Static task
static1
Behavioral task
behavioral1
Sample
d205c87dea479f66bd7326788f3b3f47_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d205c87dea479f66bd7326788f3b3f47_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d205c87dea479f66bd7326788f3b3f47_JaffaCakes118
-
Size
131KB
-
MD5
d205c87dea479f66bd7326788f3b3f47
-
SHA1
aa170a080f1808602d72ec697a0b041a98b6630c
-
SHA256
f33b7971ea9b6c7e1402d1f2d255acec8899bdb52aeb0692079dbadbe60a40c8
-
SHA512
ae8bd56432a768e72565f6490e5b0ce3f6baabeb0a26c7a92f29c6e2d75b2d6dd374881d4b9bf5abb5b7277b5957092158d41bdf3fab9045f111130f27d3eed3
-
SSDEEP
3072:0ixbCoLI/t83XlqsK3nR+UY2jG9s91oZGU1gdGLjKM8:ZxPLOt2leROmGi91m8GLjA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d205c87dea479f66bd7326788f3b3f47_JaffaCakes118
Files
-
d205c87dea479f66bd7326788f3b3f47_JaffaCakes118.exe windows:4 windows x86 arch:x86
99d30451444fc21b7a64b1c6c3e23d91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoA
ExitProcess
GetCPInfo
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetUserDefaultLangID
GlobalFree
GlobalLock
HeapReAlloc
IsDebuggerPresent
LoadLibraryA
ResumeThread
SetCurrentDirectoryA
VirtualAlloc
VirtualFree
WideCharToMultiByte
user32
CallWindowProcA
DestroyWindow
DispatchMessageA
EnableWindow
EndPaint
GetDlgItem
GetSysColor
MessageBoxA
SendMessageA
UpdateWindow
gdi32
GetBitmapBits
GetDIBColorTable
PatBlt
RestoreDC
SetROP2
SetViewportOrgEx
shell32
DragQueryFileW
ExtractIconExA
SHAddToRecentDocs
SHAppBarMessage
SHGetDesktopFolder
SHGetFileInfo
SHGetPathFromIDList
SHGetSpecialFolderLocation
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ