Static task
static1
Behavioral task
behavioral1
Sample
dae207d48ad0730951d96a3df7c5a417_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dae207d48ad0730951d96a3df7c5a417_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dae207d48ad0730951d96a3df7c5a417_JaffaCakes118
-
Size
38KB
-
MD5
dae207d48ad0730951d96a3df7c5a417
-
SHA1
30dfae152b4d5fcec8ba25c79ad42bc51e5145e5
-
SHA256
203d04d389e63cd3a2b4613d98c2825d98cb1c73a03fa9b40507c8a9274216ee
-
SHA512
959afc8f01c826885b382f8802930f2659a48d92440cd319436eac635ab6b42515a06a2e0cd710997d9f724b704acc1eea8bc56c26cabe2d10b55a9cd2a9f1a0
-
SSDEEP
384:/Dw3Bun4NZ2sLJxkyU31xo52xhGv2R9GupMSnwdB6UmVlbcUn3k9gkDY0WMiooJV:p8XLbDUvi222lM/HQa9PDrWAFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae207d48ad0730951d96a3df7c5a417_JaffaCakes118
Files
-
dae207d48ad0730951d96a3df7c5a417_JaffaCakes118.exe windows:5 windows x86 arch:x86
8da848238edc192e427de1898bfda9cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceW
InterlockedExchange
GetCurrentProcess
GetLastError
PurgeComm
AllocConsole
FatalExit
GetConsoleNlsMode
FindAtomW
DeleteTimerQueue
GetCurrentThreadId
GetTempPathW
GetUserDefaultLCID
GlobalAlloc
SetUnhandledExceptionFilter
ClearCommBreak
CreateMemoryResourceNotification
CreateFileW
AddAtomW
ExitThread
TerminateProcess
DeleteCriticalSection
GetModuleHandleW
CancelIo
OpenConsoleW
EnumDateFormatsExW
CreateMutexW
GlobalAddAtomW
CancelTimerQueueTimer
VirtualAlloc
msvcrt
_chgsign
_close
_assert
_beep
_access
_cabs
_atoldbl
_chdir
_cgetws
_atoi64
ws2_32
bind
WSACleanup
closesocket
socket
WSAStartup
WSALookupServiceNextW
listen
Sections
.data Size: - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ