Static task
static1
Behavioral task
behavioral1
Sample
dae2de5ed489ecc2478c73401ec78df7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dae2de5ed489ecc2478c73401ec78df7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dae2de5ed489ecc2478c73401ec78df7_JaffaCakes118
-
Size
326KB
-
MD5
dae2de5ed489ecc2478c73401ec78df7
-
SHA1
369aaf80e4925073f0a08a7afa442c9dfcd18395
-
SHA256
cc80f310bfda0f8c757f85475c089d64c829905a1fa87a25ac8d8f3dec24e9ae
-
SHA512
32f7714733a72c681a766fff5dac7fd5fd5c85d1a41506ac7180b2a3a670bcacaef8c31e9d3cbcd8a45451082eed1c913c3fa123a5285cbc91e476510f3b9f8a
-
SSDEEP
6144:j4P1vilSi/tYfqOCvELNuvQG79JUj7yxFFYppz0FDZHT8KKdiNwbgs6:j4P1vioKOfMsB3G7zeyzFYps5US
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dae2de5ed489ecc2478c73401ec78df7_JaffaCakes118
Files
-
dae2de5ed489ecc2478c73401ec78df7_JaffaCakes118.exe windows:4 windows x86 arch:x86
af06977a3c02e81c3cfd3737fb0165b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
FreeConsole
GetStdHandle
VirtualProtect
ResetEvent
IsBadReadPtr
GetDiskFreeSpaceExA
SetLastError
CancelIo
EnumResourceTypesW
Heap32First
IsBadStringPtrA
GetModuleHandleA
LocalFree
lstrlenA
GetLastError
GetCommandLineA
LoadLibraryExW
CloseHandle
GetConsoleTitleA
user32
GetUpdateRect
DialogBoxParamA
EnableWindow
IsIconic
GetKeyState
CreateWindowExA
CloseWindow
GetMessageA
CreateMenu
CopyImage
GetScrollBarInfo
DragDetect
DispatchMessageA
hlink
HlinkCreateFromData
HlinkOnNavigate
HlinkClone
HlinkNavigate
HlinkCreateFromString
advapi32
RegCloseKey
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ