Static task
static1
Behavioral task
behavioral1
Sample
d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118
-
Size
334KB
-
MD5
d3ee9ec0c1c1c7ced06e4b5dffbf42ae
-
SHA1
86086964166da5ed62e5da3945d4b430f8d79cd8
-
SHA256
96bf1fecb142f8f8a5142a77444d19cc3e74d730524c3390213d15d87085ecb4
-
SHA512
920bb47fd9ee5e3a2f6cfa44056e2cf82179ec325368f14d1db848707025ff1c2c4745808908580f477d66e4dc828f8990682a402c5caab0cbbd7c39ffa14182
-
SSDEEP
6144:TVQimJihVcEXaHlzjkatfsi9JnFeRF8mwBG6C0KtIzcf:TVXGQm3l3dlh9REOi0O7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118
Files
-
d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
b10cb24bc2f59c0f41ba987460bdb9b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
GetWindowThreadProcessId
SetSysColors
GetLastActivePopup
DeferWindowPos
CreateDialogParamA
BeginDeferWindowPos
GetParent
GetDlgCtrlID
GetWindowRect
MessageBoxA
IsWindowVisible
kernel32
VirtualAlloc
OpenSemaphoreA
GetModuleHandleA
GetEnvironmentVariableA
SuspendThread
GetExitCodeThread
ReleaseMutex
PulseEvent
GetProcessHeap
OpenMutexA
FreeEnvironmentStringsA
CreateSemaphoreA
GetProcAddress
GetLastError
SetEvent
LocalReAlloc
GetTickCount
GetStdHandle
GetStartupInfoA
QueryPerformanceCounter
LocalHandle
GetCommandLineA
winspool.drv
AddJobA
DeletePrinterConnectionA
DeleteFormA
DeletePrinter
ConnectToPrinterDlg
AddPrinterA
AbortPrinter
ConfigurePortA
AddPrinterConnectionA
ClosePrinter
DeletePrinterKeyA
msvcrt
_acmdln
exit
_XcptFilter
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__getmainargs
_controlfp
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qogndy Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ