Static task
static1
Behavioral task
behavioral1
Sample
d606dd933c014e6a602bc60cbea55a25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d606dd933c014e6a602bc60cbea55a25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d606dd933c014e6a602bc60cbea55a25_JaffaCakes118
-
Size
51KB
-
MD5
d606dd933c014e6a602bc60cbea55a25
-
SHA1
4dadaded2130141583a2578d842235dbee8b71c3
-
SHA256
4ec11836f4cfc3a55cf8fe099666c8ac1a7838d97bc16b51f8f494bb570ac738
-
SHA512
be8073ee2c4964da4b4f2d3a19cb47e7ce99d2d40f2e9648ebf9f7016c1384c41298f37c9ae1880ce0fe4893419f7e687a4d071d7288a3a1f62fe6be81ef50c6
-
SSDEEP
768:KYw/mfV8xhQSHQshm1YnxmGu7A+L6AIqtPcRibuVgRI:K/m98xhQuQs+YnxmP8cJigRI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d606dd933c014e6a602bc60cbea55a25_JaffaCakes118
Files
-
d606dd933c014e6a602bc60cbea55a25_JaffaCakes118.exe windows:4 windows x86 arch:x86
df2c9523d25a271754957e8db474e9bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetStartupInfoA
GetLocaleInfoA
GetCommandLineA
GetShortPathNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
CreateDirectoryA
GetLocalTime
GetVersion
GetFileAttributesA
HeapFree
CloseHandle
ReadFile
SetFilePointer
HeapAlloc
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetLocaleInfoW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
VirtualAlloc
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetProcAddress
LoadLibraryA
HeapReAlloc
SetEndOfFile
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
SetEnvironmentVariableW
LCMapStringA
LCMapStringW
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE