Static task
static1
Behavioral task
behavioral1
Sample
db6815b9d2f16948532337a8aeec31da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db6815b9d2f16948532337a8aeec31da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db6815b9d2f16948532337a8aeec31da_JaffaCakes118
-
Size
202KB
-
MD5
db6815b9d2f16948532337a8aeec31da
-
SHA1
fabe8915c70e9b364b7f2ac5567f4bc45ac8a141
-
SHA256
c047c8da686fc29e92ce0ced145df5186b5df978a75f3f7640283a061c289498
-
SHA512
a137cf12efffda5dfd32059e72f03cf84181d20b09e72ff317e34baecf8184f94a9e5444aeed69fea6312c14dc040918c6ef18d55614ee6279775c9af73ce4f0
-
SSDEEP
3072:lKlq9aZUEbwXGJGd6fOLrrtOKtbLuqqCtKSfsjHtIE+Ikv1VeZOh0I:lIqwI3d6fKRt3ytp+/1VeZOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db6815b9d2f16948532337a8aeec31da_JaffaCakes118
Files
-
db6815b9d2f16948532337a8aeec31da_JaffaCakes118.exe windows:4 windows x86 arch:x86
9320b408cb43b159b211f5a96a637668
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetCommandLineA
GetUserDefaultLangID
GetVersion
GetStartupInfoA
SetLastError
GetConsoleOutputCP
GetCurrentProcess
GetWindowsDirectoryA
GetCurrentProcessId
MulDiv
DeleteFileW
lstrcmpiW
GetCurrentThread
CopyFileA
SetCurrentDirectoryA
lstrcmpiA
GlobalFindAtomW
GetOEMCP
GetProcessHeap
GetTickCount
GetLastError
GetModuleHandleA
GetModuleHandleW
GlobalFindAtomA
GetACP
GetThreadLocale
lstrcmpA
GetCommandLineW
Sleep
IsDebuggerPresent
QueryPerformanceCounter
lstrlenA
GetDriveTypeA
DeleteFileA
lstrlenW
LoadLibraryW
GetCurrentThreadId
VirtualAlloc
user32
CharNextA
GetSystemMetrics
GetDesktopWindow
GetDC
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ