Static task
static1
Behavioral task
behavioral1
Sample
d6cbb8836da8f3608fec5b2bf95ff1a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6cbb8836da8f3608fec5b2bf95ff1a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6cbb8836da8f3608fec5b2bf95ff1a0_JaffaCakes118
-
Size
36KB
-
MD5
d6cbb8836da8f3608fec5b2bf95ff1a0
-
SHA1
457fa637145ec7b332fa200d2446fb7cff5bded4
-
SHA256
465d73948b8200dc5b9fbc66ca3e904c6852b69d9326e42edf198404b97d6089
-
SHA512
487ce54ff5fc86a827ae4c0fbcbf2defb7fcae01a92ff7c0fe9dda2df360cb64e1a6a6cb1b99abe896ac294aa513280fc2779ed430baca8301090de93ae1378e
-
SSDEEP
384:nmzHFmTbeS6NoI0k432YG86mlD5py46CkaVX9Stuf63Dp:2HabelVQ2x8d0CkaVctuS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6cbb8836da8f3608fec5b2bf95ff1a0_JaffaCakes118
Files
-
d6cbb8836da8f3608fec5b2bf95ff1a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
e402aac47e68be801bc746e14839f3d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
FlushFileBuffers
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetModuleFileNameA
VirtualAlloc
CopyFileA
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
CloseHandle
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyA
ws2_32
listen
bind
htons
inet_addr
socket
WSAStartup
WSACleanup
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ