Static task
static1
Behavioral task
behavioral1
Sample
d6e0f910f6dc906f6055af025b2ac200_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6e0f910f6dc906f6055af025b2ac200_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6e0f910f6dc906f6055af025b2ac200_JaffaCakes118
-
Size
160KB
-
MD5
d6e0f910f6dc906f6055af025b2ac200
-
SHA1
f6a2b1dc32defba4d19cf6b4411c564b8c775060
-
SHA256
2739685adca05cfa408b1f53f18e2aa4a410351faf26016ccb98feeb18f0c69c
-
SHA512
1203962dd7d08e242c462fbf836d0dc22718874d36370a5b31d486a43e412c64ae9626b6a7a5772944ad053645d075b84a2c2f91347fffb75aa87f0efa1f45a5
-
SSDEEP
3072:u2GtnZTaLPEXPyr8D1PHGvKxIYc4UCo7lYgCc1qRLHWKs:uRZIGKr8D1PdxIz4UCylZgdHW3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e0f910f6dc906f6055af025b2ac200_JaffaCakes118
Files
-
d6e0f910f6dc906f6055af025b2ac200_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7e56f6d0bfa396e996f59a46eb43910
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
LCMapStringW
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetStringTypeA
lstrlenA
ReadConsoleA
VirtualAlloc
FreeConsole
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
user32
KillTimer
GetParent
EnableMenuItem
CallWindowProcA
TrackPopupMenu
GetSubMenu
DefWindowProcA
UpdateWindow
IsWindow
DestroyIcon
ShowWindow
SetFocus
MessageBoxA
GetWindowLongA
gdi32
DeleteDC
CreateDCA
SelectObject
SelectPalette
RealizePalette
comdlg32
PrintDlgA
GetSaveFileNameA
shell32
ShellExecuteA
SHGetFileInfoA
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ