Static task
static1
Behavioral task
behavioral1
Sample
db01783710e0c5aff92156a0e76deade_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db01783710e0c5aff92156a0e76deade_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db01783710e0c5aff92156a0e76deade_JaffaCakes118
-
Size
112KB
-
MD5
db01783710e0c5aff92156a0e76deade
-
SHA1
f90167c2424970fb586bdecd4c5eb7738b885f31
-
SHA256
237b74d3fd84f91aba3e541a34dd92c02b3625e61bf7ee0c01e691dd56004e15
-
SHA512
86417d98b58b2fc9820ba84a4daf749d3ac05bded84310170c97fd43c1952c679394165e28b62a9984fc673c58a06da99350341ce11d9ffc2e080987944bc835
-
SSDEEP
1536:GLet+Nn/JQvDDdq7RnGU59ol1yNHuH4iKEFXvxKqHs:GLu+N/m3dmnG6ozyhuH/Xey
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db01783710e0c5aff92156a0e76deade_JaffaCakes118
Files
-
db01783710e0c5aff92156a0e76deade_JaffaCakes118.exe windows:4 windows x86 arch:x86
efd04dbbe0c645ce50451c7cd83703a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
CloseHandle
GetLastError
CreateMutexA
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateDirectoryA
CreateProcessA
MoveFileExA
MoveFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
shell32
ShellExecuteExA
ShellExecuteA
SHChangeNotify
msvcrt
_initterm
_beginthread
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
strstr
_vsnprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_controlfp
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ