Static task
static1
Behavioral task
behavioral1
Sample
db0d31ac7267d34364ece1fcd0f1f5fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db0d31ac7267d34364ece1fcd0f1f5fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db0d31ac7267d34364ece1fcd0f1f5fd_JaffaCakes118
-
Size
234KB
-
MD5
db0d31ac7267d34364ece1fcd0f1f5fd
-
SHA1
ac01328c87a4874a9c6ff1bef971c169877f307f
-
SHA256
9ebb840f620113af2bec1d75c72756723c133b7f06c84a85aa25681f4444aa3c
-
SHA512
864de1fc98a374ef34f10bf371faee2e4d557b47c64e915fa3ae0b599762a406e6973e1bd4bc5ed9e2bbba390a73993db65ac22461e10783999439d48d3eed92
-
SSDEEP
6144:UYVGFAAOrNHEeZ3bWmceMB2o6x1F/3EG4:UYVLEepvcwnF3EG4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db0d31ac7267d34364ece1fcd0f1f5fd_JaffaCakes118
Files
-
db0d31ac7267d34364ece1fcd0f1f5fd_JaffaCakes118.exe windows:5 windows x86 arch:x86
1144be6880e0c1c475aebe2fbda5cfea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
TerminateProcess
GetSystemTimes
GetNativeSystemInfo
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
GetCurrentProcess
GetProcessTimes
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
CreateFileW
GetThreadPriorityBoost
SetLastError
SetStdHandle
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
MultiByteToWideChar
GetStringTypeW
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
GetLastError
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapReAlloc
HeapFree
GetStdHandle
WriteFile
GetModuleFileNameW
GetACP
GetFileType
GetProcessHeap
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
user32
PostMessageW
GetCaretPos
ReleaseDC
EndPaint
gdi32
BeginPath
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ