Static task
static1
Behavioral task
behavioral1
Sample
db1257fe78e879d970ca64e0dca454a7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db1257fe78e879d970ca64e0dca454a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db1257fe78e879d970ca64e0dca454a7_JaffaCakes118
-
Size
164KB
-
MD5
db1257fe78e879d970ca64e0dca454a7
-
SHA1
32b9afc166066c1454afa3c32aab58455f29b48c
-
SHA256
97994dd2c4ef2f7692220c4d6f36abccd415001d9214bd8b0415c6e756506578
-
SHA512
3bb4d450be50c186c39a99a50aa6b4b92cd11bb5bad3795ed43f3056faad3a8d4d64cf6478d07221b8517046e415f3524c5bc02761a53dd6ca32750309af28d8
-
SSDEEP
3072:PT+dNCGJAGYEIgoGg4UPr6PLH8gGVFjLms/zQVFlS5iK4apPLjBSTn+S4AxeH:PTyNCGJdE4Uj6PLQF/mq6FlqNNppSTHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db1257fe78e879d970ca64e0dca454a7_JaffaCakes118
Files
-
db1257fe78e879d970ca64e0dca454a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
390b9d2b116944d8d880146c089da64e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchangeAdd
GlobalReAlloc
SetCommConfig
GetQueuedCompletionStatus
GetEnvironmentStrings
WriteConsoleOutputCharacterA
HeapSetInformation
SetLocaleInfoA
HeapLock
user32
MsgWaitForMultipleObjectsEx
InSendMessage
BeginPaint
EnumThreadWindows
GetClassNameA
CreateAcceleratorTableA
GetScrollRange
SetKeyboardState
SetMenuDefaultItem
GetQueueStatus
CreateIconIndirect
HideCaret
GetWindowTextA
SetDebugErrorLevel
gdi32
ResetDCA
SetMapMode
GetStretchBltMode
GetOutlineTextMetricsW
SetSystemPaletteUse
ColorMatchToTarget
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE