Static task
static1
Behavioral task
behavioral1
Sample
da5b6491aecd80b669fbdd827849240c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da5b6491aecd80b669fbdd827849240c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da5b6491aecd80b669fbdd827849240c_JaffaCakes118
-
Size
376KB
-
MD5
da5b6491aecd80b669fbdd827849240c
-
SHA1
2ef8ec480b38552d6bd33771e880a7aabb5d51d4
-
SHA256
28c2eca9a1eaf79aab861620a512481c174357053e5efa95e3760e8478b3b950
-
SHA512
4031af5a7ea7db496605505077fc32550cb9064c9b5eba28d1573a55ba6136f3d91dee17b3656cf28be0f6f76f53dc59458b95d433025d399c4b3fcfeb30ea36
-
SSDEEP
6144:m7dLJ36f/Qxa3AJFuK6YFCXtr575sDGopDyxGS9Y7iISCNrnFFa1w:mL6fYxeOFVF6trPwhfbTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5b6491aecd80b669fbdd827849240c_JaffaCakes118
Files
-
da5b6491aecd80b669fbdd827849240c_JaffaCakes118.exe windows:4 windows x86 arch:x86
c3f30b2a3f370fee6d8e23f121a9f2fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
CloseHandle
WriteFile
CreateFileA
SuspendThread
CreateThread
FreeResource
SizeofResource
LoadResource
FindResourceExA
VirtualProtect
VirtualFree
Sleep
GetLastError
GetProcAddress
VirtualQuery
CopyFileA
LoadLibraryA
LocalAlloc
CopyFileExA
ReadFile
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
lstrcpyA
GlobalAlloc
GetTickCount
LockResource
GlobalFree
GetModuleHandleA
VirtualAlloc
SetLastError
LocalFree
HeapFree
HeapCreate
HeapDestroy
GetFileType
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
user32
CreateWindowExA
ShowWindow
IsWindowEnabled
LoadIconA
LoadCursorA
RegisterClassExA
GetDesktopWindow
IsWindow
GetDC
UpdateWindow
gdi32
CreatePenIndirect
DeleteObject
GetDIBits
advapi32
RegOpenKeyExA
RegSaveKeyA
RegLoadKeyA
RegCloseKey
msvfw32
DrawDibOpen
msacm32
acmStreamReset
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 717KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ