Static task
static1
Behavioral task
behavioral1
Sample
d5962184302a6a3f4b9d3e86604877b6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5962184302a6a3f4b9d3e86604877b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5962184302a6a3f4b9d3e86604877b6_JaffaCakes118
-
Size
100KB
-
MD5
d5962184302a6a3f4b9d3e86604877b6
-
SHA1
4717c99d6e77e39072e6c5824549f04dd17af990
-
SHA256
2c954cbf863fb9caba6ae9f17b24d0c30d5e2ba3ddfb45b12834828c0fd6eca8
-
SHA512
89d97a8c3ff6915ac74b5239404095fdb7723b60e927ffe9c1dc63c7de66d53734b07d364421b1e31c5cae208462547d1408ab7065dbcb82d4f3cd83ceec9346
-
SSDEEP
1536:rfG9F9vLOa35A+jk4Bx3e5i+nKfvOSWCfvxnPxAukSsN2OxFoYM:rf+9yW5Nf3e5BKPKPSsN2OxFo3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5962184302a6a3f4b9d3e86604877b6_JaffaCakes118
Files
-
d5962184302a6a3f4b9d3e86604877b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2602aa59d243105e16a5a7a0ac6ccaf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
GetVersion
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThreadId
lstrcmpiA
GetProcAddress
LockResource
TlsAlloc
HeapAlloc
VirtualAlloc
GetStringTypeW
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
user32
DefWindowProcA
BeginPaint
EndPaint
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadIconA
RegisterClassExA
MessageBoxA
EndDialog
GetClientRect
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
FindWindowA
gdi32
Rectangle
GetDeviceCaps
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExA
shell32
StrStrIA
ole32
CoTaskMemAlloc
CoInitialize
CoUninitialize
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SEGM0 Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 7B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ