Static task
static1
Behavioral task
behavioral1
Sample
dafdd69947cac0bdb96ca33af838f9f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dafdd69947cac0bdb96ca33af838f9f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dafdd69947cac0bdb96ca33af838f9f5_JaffaCakes118
-
Size
352KB
-
MD5
dafdd69947cac0bdb96ca33af838f9f5
-
SHA1
9bccc7f85e7ffdc611535628cce7e0401912061d
-
SHA256
b0f3eede7871a2dbd971ee5b4d793268b86e49834c857316a6d3fbc4a9de73b0
-
SHA512
4c304e4e1a5c55e73942199744dc154af196136deaebace881ad0915146bbf2d47f4d209c6a5cbc70cb1451e54dfdf371a8d35440e918c95a1dfc6d56c49c4c7
-
SSDEEP
6144:etUqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeadj/:+WDQcShyGloFjbTA1KmNo/VFNdD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dafdd69947cac0bdb96ca33af838f9f5_JaffaCakes118
Files
-
dafdd69947cac0bdb96ca33af838f9f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
68fbcc6d40d98f3bd42241a5e17e293f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
GlobalUnlock
GlobalLock
GetLastError
FreeEnvironmentStringsA
LoadLibraryExA
OpenMutexA
GetSystemTime
FreeConsole
VirtualProtectEx
GetModuleHandleA
lstrlenA
OpenSemaphoreA
GetStdHandle
FindClose
CloseHandle
ResumeThread
LocalFree
GetACP
CreateEventA
user32
IsIconic
DialogBoxParamA
GetComboBoxInfo
GetSubMenu
LoadCursorA
GetDlgItemTextA
CreateWindowExA
IsMenu
GetMessageA
ClipCursor
EndDialog
GetMessageA
SetFocus
MessageBoxA
msasn1
ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck
ASN1DecAlloc
ASN1BEREncOpenType
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ