Static task
static1
Behavioral task
behavioral1
Sample
d61f841249c440f741dcbf430bb3e1a7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d61f841249c440f741dcbf430bb3e1a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d61f841249c440f741dcbf430bb3e1a7_JaffaCakes118
-
Size
312KB
-
MD5
d61f841249c440f741dcbf430bb3e1a7
-
SHA1
65ff9c9c81794e2c3499cdeb15da1d0cfd8a0ce5
-
SHA256
8ac2b392e0f68459b2a96587db3471f03a0c9f83648211454f546f735003f8cc
-
SHA512
337511ab4a7034fe56bc56a51b879c504003d03e2446d4b50aa184607a0d67dfd056b35d1b9e28d01a19466eadfd1113cddc7d0cbee48b1a9c686faf8f69907b
-
SSDEEP
6144:Hbn8YMs5a8nqK7eEvRoOY5Oka6Q2iH0699R2rF531xjk:7n8FK7eEvyOY8kb/c4p91K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d61f841249c440f741dcbf430bb3e1a7_JaffaCakes118
Files
-
d61f841249c440f741dcbf430bb3e1a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f8b6dd395bd38db5fdd9680ed9cf483
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetProcessHeap
CreatePipe
GetConsoleCP
IsDBCSLeadByte
GetThreadLocale
GetVolumeInformationA
GetExitCodeThread
TlsGetValue
GetPriorityClass
GetOEMCP
VirtualAlloc
TlsFree
GetStdHandle
SetEvent
CompareStringA
GetUserDefaultLangID
ReleaseMutex
CreateMutexA
GetModuleHandleA
GlobalFindAtomA
user32
IsIconic
GetClassNameA
GetWindowTextLengthA
ReleaseDC
CloseWindow
GetWindow
RegisterClassA
ValidateRect
GetFocus
ReleaseDC
GetClassInfoExA
GetForegroundWindow
InvalidateRect
IsWindowVisible
GetSystemMetrics
GetActiveWindow
ShowWindow
GetDC
GetWindowTextA
shell32
SHChangeNotify
SHGetFileInfoA
SHCreateShellItem
SHGetFolderPathA
SHBrowseForFolderA
ntdsapi
DsBindA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ