Static task
static1
Behavioral task
behavioral1
Sample
d59a8f1318a3dfd90697ee9518510ecc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d59a8f1318a3dfd90697ee9518510ecc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d59a8f1318a3dfd90697ee9518510ecc_JaffaCakes118
-
Size
3.6MB
-
MD5
d59a8f1318a3dfd90697ee9518510ecc
-
SHA1
44d131801a902a8a28779d4bee7b0803a4644fb7
-
SHA256
2e40dbfd0e1229088fde6204726930a6b93adf18c70a8067efb6849b3afc49b9
-
SHA512
2fb648b962f89d4f75eee70c5588725492f58ed6d7261fd11138f333f2e213279baf449caf27e192b3b1da417fc0b1be5ecbc27d9db3741514f2994fbc4475dc
-
SSDEEP
49152:OkHSlUuTMy24HuFR0WvPsC1lSGt54orcVNk4OcFcqMgETTGWVIRe9B3CQAeTF:OXWOuFkGlSGLFos4nFMgZRRIN7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d59a8f1318a3dfd90697ee9518510ecc_JaffaCakes118
Files
-
d59a8f1318a3dfd90697ee9518510ecc_JaffaCakes118.exe windows:5 windows x86 arch:x86
b9501d770ca68aeb2df60c9705dd10f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
OpenProcess
lstrlenW
GetProcAddress
AddVectoredExceptionHandler
GetCurrentProcess
GetModuleHandleA
EnumDateFormatsW
LocalFree
SetUnhandledExceptionFilter
VirtualLock
RemoveVectoredExceptionHandler
user32
CreateWindowExA
GetClassNameW
RegisterClassW
GetClassInfoExA
MessageBoxA
Sections
6 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
6 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
U Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PnJ Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
NF3 Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ij2 Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b2A Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE