Static task
static1
Behavioral task
behavioral1
Sample
d6e52cb356852bd169c1ce0aacdd9181_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6e52cb356852bd169c1ce0aacdd9181_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6e52cb356852bd169c1ce0aacdd9181_JaffaCakes118
-
Size
303KB
-
MD5
d6e52cb356852bd169c1ce0aacdd9181
-
SHA1
321948c00f7cd8377207a3175f80b87201c0f0d2
-
SHA256
338a3e0a65aa6784a0d3e55d4c2761b6bceac16f333d28553f98938192df6687
-
SHA512
f9321ea18d4376e7b00a51f1d94fe8d4272fb730a53f1b2b9b260e5d4d174a595fff73c0b1ba522cf66409d47b3bf54980fc68326e1e2dc08ae962dca5620aa9
-
SSDEEP
6144:XMZNfge2c+5WapR97XM/DTQs9fRVOq6Tb20Z:8Lb2cUpRyDHfRVONl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e52cb356852bd169c1ce0aacdd9181_JaffaCakes118
Files
-
d6e52cb356852bd169c1ce0aacdd9181_JaffaCakes118.exe windows:4 windows x86 arch:x86
0d1f375905aae07b635a9268f37ee63e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileSize
GetModuleHandleA
SetFileTime
InitializeCriticalSection
CreateMutexW
SetFileTime
IsBadWritePtr
FindResourceW
LoadLibraryA
FormatMessageW
lstrcatA
LeaveCriticalSection
lstrcpyA
GetLastError
CloseHandle
HeapCreate
ReadFile
GetStartupInfoW
SetFileTime
CreatePipe
GetExitCodeProcess
msi
MsiDatabaseCommit
MsiCollectUserInfoA
MsiConfigureFeatureA
MsiAdvertiseProductW
user32
DispatchMessageA
IsWindow
MessageBoxA
wsprintfW
SetFocus
PeekMessageW
IsZoomed
GetWindowRect
LoadCursorW
IsDialogMessageA
PostMessageW
GetWindowTextA
GetWindowLongW
clbcatq
SetSetupSave
Sections
.text Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 129B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE