Static task
static1
Behavioral task
behavioral1
Sample
dafe60a820cb941b597129b83a118136_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dafe60a820cb941b597129b83a118136_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dafe60a820cb941b597129b83a118136_JaffaCakes118
-
Size
99KB
-
MD5
dafe60a820cb941b597129b83a118136
-
SHA1
66b9d1783fcbcb2edff9808f7a381a06d8f9adff
-
SHA256
cd6be83b88f52644477ac510d7d556cd5ac5859de0976a3cded900a7236fc579
-
SHA512
43eb960a0ebf94649ff9db644f88420001951300105e41b18a396dc4ba6d09f4cc453d1eb9990c27a906af94445c34667c30b1f9b82886433407165333398e17
-
SSDEEP
768:FfNO+v0dq5uKLuvKxwGuJbKYdhvjjcBNlhc44U5+3GpK+md+qs:Fnv0d3KLuKvuxJ0BS4F5+2pKl+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dafe60a820cb941b597129b83a118136_JaffaCakes118
Files
-
dafe60a820cb941b597129b83a118136_JaffaCakes118.exe windows:1 windows x86 arch:x86
17a0bc12b417cbae0d343b7d3f851c95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapAlloc
FreeLibrary
InitializeCriticalSection
GetProcessHeap
LocalFree
QueryPerformanceCounter
GetCurrentProcess
GetCommandLineA
GetVersionExA
GetACP
FormatMessageW
lstrlenW
LocalAlloc
EnterCriticalSection
LocalAlloc
GetTickCount
GetModuleHandleW
GetProcessHeap
HeapFree
QueryPerformanceCounter
LoadLibraryA
GetStartupInfoA
VirtualAlloc
GetModuleHandleA
Sections
.ckps Size: 87KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.spju Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wwiw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xern Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ulfr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xetn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jnrm Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hhwj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vnlv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE