Static task
static1
Behavioral task
behavioral1
Sample
d694ad4cb5117fe904ca8576997bee01_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d694ad4cb5117fe904ca8576997bee01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d694ad4cb5117fe904ca8576997bee01_JaffaCakes118
-
Size
36KB
-
MD5
d694ad4cb5117fe904ca8576997bee01
-
SHA1
75eafead2baad5e89ca22f24c37b4e4074743c3e
-
SHA256
ccb27012b3fdfcac4914b93de9447001203e56ed32f389d495b3c9b4f564ebcb
-
SHA512
f4e1d4eb2fef8189670796207e92ce024aae9727eb53cac05f60a90acf015c26672106db85a058c7fe6c698c68a3254ca7e48117a35fa44323670f315be6fd82
-
SSDEEP
384:2siydnCBsZ1+p9MTfzSWc1NvbcTwBUFmluyrRKGQyrGamc79U9joddu:HnCBgnfz01uEmg+Cmc79Uho
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d694ad4cb5117fe904ca8576997bee01_JaffaCakes118
Files
-
d694ad4cb5117fe904ca8576997bee01_JaffaCakes118.exe windows:4 windows x86 arch:x86
1854182531e4739f6dfddb27aa4dedac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
lstrcpyA
GetDriveTypeA
lstrcmpA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
lstrcatA
CopyFileA
GetLastError
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
ReleaseMutex
GetLocalTime
CloseHandle
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
user32
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE