Static task
static1
Behavioral task
behavioral1
Sample
d3d8cf5888e330fd9bcb34b3c6066874_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3d8cf5888e330fd9bcb34b3c6066874_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3d8cf5888e330fd9bcb34b3c6066874_JaffaCakes118
-
Size
367KB
-
MD5
d3d8cf5888e330fd9bcb34b3c6066874
-
SHA1
b693cf045f3ed6aeb51c6381387b1b2787bdd6c4
-
SHA256
5e952f740a779826fb46116bc677d16e70a151479878ccf4a789edae2d135878
-
SHA512
41d4533f775e1fcf1049cbf3d96ec719755d998a8c993758c2b190025deb29d2a8ea68af9a2ccc3daa1e1a4d54b0e086b934c27f684468b523403462c6fa129f
-
SSDEEP
6144:6RMchrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:6RM6rpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d8cf5888e330fd9bcb34b3c6066874_JaffaCakes118
Files
-
d3d8cf5888e330fd9bcb34b3c6066874_JaffaCakes118.exe windows:4 windows x86 arch:x86
5748cd51a19909d75d20fcb3e770291b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
ReadFile
TlsGetValue
FindAtomW
FindClose
GetCurrentProcessId
HeapCreate
lstrlenW
GetDriveTypeW
GetConsoleAliasW
GetModuleFileNameA
GetCurrentThreadId
SetEvent
ResumeThread
GetNumberFormatW
SetLastError
EnterCriticalSection
LocalFree
GetModuleHandleA
GetPrivateProfileStringW
user32
DispatchMessageA
DrawTextA
DispatchMessageA
GetClassInfoA
GetClientRect
GetCursorInfo
SetFocus
CallWindowProcW
GetSysColor
IsWindow
GetKeyState
GetMenuInfo
GetKeyboardType
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ