Static task
static1
Behavioral task
behavioral1
Sample
d4ca231a2f5cc095ff028ba639b9759c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4ca231a2f5cc095ff028ba639b9759c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4ca231a2f5cc095ff028ba639b9759c_JaffaCakes118
-
Size
159KB
-
MD5
d4ca231a2f5cc095ff028ba639b9759c
-
SHA1
776d55409c1e59d5ad33a7aa43f1ed6a99f74d6e
-
SHA256
97a5a9d462249dba58677df45733b2bfe9a6776bca10ca8bc6bb0d2b51b6603c
-
SHA512
42eeaae5fc41134c72113dc9f2c34a81273e5ed9f3ab21e255c53e70052f17a3a02096c732a27a6f7f8d059925be562584abec72099394381102bbd9cb43db89
-
SSDEEP
3072:cDUYDiS6yIsGvj90fO4kOh/JWQHAKnt5sS/ci8m8r5xNGhq4gACebjHWc/b1+GD/:YDiS6yIsGb9gRWIAYxcp33Un1nD/hGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4ca231a2f5cc095ff028ba639b9759c_JaffaCakes118
Files
-
d4ca231a2f5cc095ff028ba639b9759c_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2c2fa44ca5f25b0268bb08ffc27f7a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
IsBadCodePtr
lstrcat
EnterCriticalSection
LoadLibraryExA
SetConsolePalette
GetStdHandle
WriteProfileStringA
RaiseException
VirtualAlloc
DeleteAtom
GlobalFree
GetOEMCP
GlobalAddAtomA
SetCommBreak
GlobalAddAtomA
LoadResource
LocalFree
GlobalUnlock
HeapCreate
user32
AlignRects
GetActiveWindow
IsIconic
GetWindowTextLengthA
CloseWindow
ValidateRect
GetClassNameA
DrawEdge
BeginPaint
GetClassInfoExA
EndPaint
GetWindow
GetForegroundWindow
GetFocus
GetWindowTextA
ShowWindow
GetParent
ReleaseDC
GetDC
wsock32
WSAGetLastError
WSACleanup
WSASetBlockingHook
WSAStartup
WSAAsyncGetServByPort
linkinfo
CreateLinkInfoA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ