Static task
static1
Behavioral task
behavioral1
Sample
db6ea9a64aa2f1142bb8927e5b62622d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
db6ea9a64aa2f1142bb8927e5b62622d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db6ea9a64aa2f1142bb8927e5b62622d_JaffaCakes118
-
Size
156KB
-
MD5
db6ea9a64aa2f1142bb8927e5b62622d
-
SHA1
3e9dac5024d26e09345551ec77ff51d2aa39a5cc
-
SHA256
422f7db2829d460e044815f5da6ea5349e7f84f4683b337e4f9c4d56f36975a0
-
SHA512
e1ed82ab2ef5eaf13833c4ee9f974cf28827be52a8f847b918940b1d19b6e62b507c40787d808d7c2fb51dae88b5a3503894265707f052af377e911c2ad5d36a
-
SSDEEP
3072:+G91nc+4NwJciw8rJ3rHCnPgjGvwg/IwZd6ytvDPjoOhZ/:+GTc+QVgTm6g/I6PEOf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db6ea9a64aa2f1142bb8927e5b62622d_JaffaCakes118
Files
-
db6ea9a64aa2f1142bb8927e5b62622d_JaffaCakes118.exe windows:4 windows x86 arch:x86
777a18d6fd931ce83870afeda7c43bf2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
LCMapStringW
LCMapStringA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
CompareStringW
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
WriteConsoleA
VirtualAlloc
VirtualProtect
VirtualFree
ResetEvent
CopyFileW
CreateDirectoryW
CreateFileW
SetFilePointer
GetFileSize
ReadFile
GetStringTypeA
CloseHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
SetEnvironmentVariableA
TerminateProcess
HeapReAlloc
HeapFree
HeapCreate
HeapDestroy
GetProcAddress
ExitProcess
GetVersion
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
user32
RegisterClassExA
IsClipboardFormatAvailable
CheckRadioButton
OffsetRect
EndDialog
CloseClipboard
SendDlgItemMessageA
SetClipboardData
GetCursorPos
GetWindowLongA
CallWindowProcW
GetClassInfoExA
AppendMenuA
TrackPopupMenu
CharToOemA
SetFocus
GetFocus
SetForegroundWindow
gdi32
CreateRectRgn
GetPixel
PtVisible
CreateFontA
GetStockObject
Rectangle
RestoreDC
SaveDC
ExtTextOutA
CreateFontIndirectA
StartDocA
EndPage
SelectClipRgn
ws2_32
send
recv
select
inet_addr
ntohl
ioctlsocket
getservbyport
socket
setsockopt
getservbyname
getprotobynumber
WSACleanup
WSAStartup
listen
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ