Static task
static1
Behavioral task
behavioral1
Sample
db38e36da291d270393cdf21f1825e59_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db38e36da291d270393cdf21f1825e59_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db38e36da291d270393cdf21f1825e59_JaffaCakes118
-
Size
41KB
-
MD5
db38e36da291d270393cdf21f1825e59
-
SHA1
081023c7cc8df28c1d27b42091e6db84c6a01c46
-
SHA256
5a2a0fbb22b5821af344462dea3b7c5ea154600cd54b113d7b2bfad4254f1207
-
SHA512
9876f6ea1aba558072a2a4042433be6b0268e557c1cb19b70e21748517998a4296fc0fc4f7e71b996ad861cdb8cd2db9fef834544d99e0a67c0a4e3e84493d42
-
SSDEEP
768:Pj8VMqyyZCAXdZ1bgSoys/wpVcrswoA5hSiE:P4VRjXyF63AmP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db38e36da291d270393cdf21f1825e59_JaffaCakes118
Files
-
db38e36da291d270393cdf21f1825e59_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1cfdeba01b7fb76d36141a1a9c5460b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAddAtom
atl
AtlMarshalPtrInProc
kernel32
QueryPerformanceCounter
GetTickCount
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
LoadLibraryW
SetLastError
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetCurrentThreadId
VirtualAlloc
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ