Static task
static1
Behavioral task
behavioral1
Sample
d9f5a2fb405aef545a35873b109babc7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9f5a2fb405aef545a35873b109babc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9f5a2fb405aef545a35873b109babc7_JaffaCakes118
-
Size
119KB
-
MD5
d9f5a2fb405aef545a35873b109babc7
-
SHA1
c897fa9be3bd6937c22ebf984946479f76ce7fab
-
SHA256
318c66205630f08f20bfa98402d1dfc50abf3ab756b19184764a18508a7cfd1e
-
SHA512
07d27a1a47fb252a60735a77b4921692538e3697298cc729b24d2ff2b58a0c785108a3024a9b94eb14987f9fd08cb038c59d6962129c19f495d6ef42517d6e34
-
SSDEEP
3072:fWEIinVsSx7b247mXjxlrQcuCZI3AfiplAg0Fuj5v1cynLM:OEDrx72uCZmAOcynLM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f5a2fb405aef545a35873b109babc7_JaffaCakes118
Files
-
d9f5a2fb405aef545a35873b109babc7_JaffaCakes118.exe windows:6 windows x86 arch:x86
747432666eaed826771d77b9948f2788
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
CopyFileA
DeleteFileA
CloseHandle
RemoveDirectoryA
CreateProcessA
GetModuleHandleA
WriteFile
GetTempPathA
GetTempFileNameA
WriteConsoleW
CreateFileW
HeapSize
FindResourceA
GetModuleFileNameA
SizeofResource
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LCMapStringW
GetStringTypeW
GetCPInfo
RtlUnwind
RaiseException
GetLastError
FreeLibrary
LoadLibraryExW
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
GetFileType
HeapReAlloc
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
user32
MessageBoxA
advapi32
RegGetValueA
RegDeleteKeyExA
shell32
SHFileOperationA
SHGetFolderPathA
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ