Static task
static1
Behavioral task
behavioral1
Sample
d9906a365df0bfbb60ccbc315d93fe99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9906a365df0bfbb60ccbc315d93fe99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9906a365df0bfbb60ccbc315d93fe99_JaffaCakes118
-
Size
114KB
-
MD5
d9906a365df0bfbb60ccbc315d93fe99
-
SHA1
25d6bf8608d09c9daccf500982e3c4d26e09a5a9
-
SHA256
703dc1dbdba9891831a818bd809c6a95d981960480b2e9c6ded36d65081aafbd
-
SHA512
7eb2e3a5ed38b010718d9277a8c23ea4487490a55cb63370698fdd3923e33d596041fb33e39d18f23db25b9a97632d85404ac8dea56a53b67bf708ccddd62fed
-
SSDEEP
3072:PFoFunpn791++J8MhzlB6G+cmcqmXzWaxIz8:qapn7WE8Mhzl7+Zq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9906a365df0bfbb60ccbc315d93fe99_JaffaCakes118
Files
-
d9906a365df0bfbb60ccbc315d93fe99_JaffaCakes118.exe windows:5 windows x86 arch:x86
534a9e83c1760fa9cee7308215e7c3e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
lstrcpyA
ResetEvent
GetStdHandle
lstrcpyW
GetACP
GetConsoleCP
GetConsoleWindow
ReleaseMutex
SuspendThread
AddAtomW
GetWindowsDirectoryA
GetVersionExA
GetSystemDefaultLangID
SetEvent
Thread32First
GetExitCodeThread
GetUserDefaultLangID
BeginUpdateResourceW
Thread32Next
SetProcessPriorityBoost
GetCurrentProcess
CreateToolhelp32Snapshot
GetCurrentThreadId
GetVersion
GetFileType
RemoveDirectoryW
GetTempPathW
ReadFile
TerminateThread
GetEnvironmentStringsW
GetStartupInfoW
GetCurrentThread
CloseHandle
DeleteFileA
GetThreadPriority
Process32Next
GetCurrentProcessId
GetSystemDefaultLCID
GetTempPathA
ExitThread
VirtualAlloc
GetProcAddress
LoadLibraryA
IsBadReadPtr
VirtualProtect
ExitProcess
VirtualFree
user32
GetDoubleClickTime
GetWindowThreadProcessId
GetDialogBaseUnits
CloseWindow
GetShellWindow
GetCaretPos
IsHungAppWindow
AnyPopup
GetInputState
GetTopWindow
GetMessageTime
GetActiveWindow
ShowCaret
GetAsyncKeyState
GetMessageExtraInfo
GetKeyboardType
GetMenuItemCount
IsZoomed
msi
ord14
Sections
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ