Static task
static1
Behavioral task
behavioral1
Sample
d3ccca3442d99eb83c3dad67cabea5d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3ccca3442d99eb83c3dad67cabea5d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3ccca3442d99eb83c3dad67cabea5d8_JaffaCakes118
-
Size
102KB
-
MD5
d3ccca3442d99eb83c3dad67cabea5d8
-
SHA1
284ce3205675ec52756036f4bc2b4fe5d9aaf210
-
SHA256
565d611fa7e8ce4f36223f89a1d4144e3b84484973326aad326ddb9c1b0860be
-
SHA512
e98837955bc70c50804618ffa26edf0cddc8e8d0f4a539dde0d472f0087b9a000d77de07b727ef012e1f5e1aeff6626e6fda3e885beaa01b8563840790a31bf7
-
SSDEEP
1536:/acTpQvS1W0dGMCP5jXbXz0px1XvrAOwymrziIo3oSbx74T8p5:yoV1W0dGf5Ln0T9hgOYSbx74gD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ccca3442d99eb83c3dad67cabea5d8_JaffaCakes118
Files
-
d3ccca3442d99eb83c3dad67cabea5d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
18202619cb6636076858f86ce5f011aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord844
ord312
ord849
ord284
ord280
ord858
ord827
ord415
ord864
ord479
ord845
ord841
ord651
ord807
ord160
ord307
ord476
ord553
ord419
ord182
ord855
ord296
ord305
ord560
ord565
ord360
ord798
ord397
ord441
ord329
ord248
ord765
ord346
ord657
ord784
ord395
ord304
ord362
ord736
ord364
ord811
ord318
ord406
ord722
ord377
ord443
ord512
ord511
ord795
ord822
ord509
ord513
ord793
ord385
ord719
user32
ord439
ord237
ord93
ord81
ord83
ord145
ord536
ord535
ord576
ord305
ord513
ord336
ord234
ord332
ord634
ord23
ord498
ord165
ord249
ord318
ord321
ord415
ord147
ord525
ord508
ord185
ord396
ord425
ord254
ord581
ord671
facehelp
ord37
ord21
ord20
ord15
ord17
ord35
ord34
ord6
ord22
ord7
ord29
ord32
ord33
ord11
ord1
ord12
ord30
ord25
ord9
ord8
ord13
ord5
gdi32
ord329
ord378
ord371
ord326
ord161
ord206
ord176
comctl32
ord5
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 943B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ywxgyip Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE