Static task
static1
Behavioral task
behavioral1
Sample
dd2e8ce19521d3cc0a19ec42e97fa3fa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dd2e8ce19521d3cc0a19ec42e97fa3fa_JaffaCakes118
-
Size
148KB
-
MD5
dd2e8ce19521d3cc0a19ec42e97fa3fa
-
SHA1
327155127b818fc3730a5bf83004fc5cd3eba056
-
SHA256
d01c784800a2e84be7152df98a3e510dec08b87b1f043b4ad4c36367e1f776b4
-
SHA512
fbb20da289c2fd31a998807ae3d82e64126b7cae251b29c6246eff2c274e99f716f1d96083ade12abe1c120c905aae377515cb4e5fbda31be8aba00c0cb08126
-
SSDEEP
3072:b3Tt6yOBlR55Mmfn1WnyCT+qHDVysxxQYQ8zjwXZeG:bjt7OBlnt/Y+qjEsxM8P4d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd2e8ce19521d3cc0a19ec42e97fa3fa_JaffaCakes118
Files
-
dd2e8ce19521d3cc0a19ec42e97fa3fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
24db88661076aeb54fae8ffa12cf2fe1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
CloseHandle
RemoveDirectoryA
lstrcatA
FindFirstFileA
lstrcmpiA
GetModuleFileNameA
OpenFile
GetPrivateProfileIntA
CreateThread
_lwrite
_lcreat
LockResource
SizeofResource
LoadResource
FindResourceA
WinExec
GetShortPathNameA
GetSystemDirectoryA
GetWindowsDirectoryA
GetPrivateProfileStringA
Sleep
LocalFree
lstrlenA
LocalAlloc
lstrcpyA
LoadLibraryA
GetProcAddress
_lclose
FreeResource
FreeLibrary
GetModuleHandleA
HeapFree
WriteFile
HeapAlloc
VirtualAlloc
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
GetFileType
SetHandleCount
GetStdHandle
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentProcess
ExitProcess
GetCommandLineA
RtlUnwind
UnhandledExceptionFilter
TerminateProcess
GetVersion
user32
DestroyWindow
wsprintfA
GetDlgItem
SendMessageA
SetTimer
SetDlgItemTextA
KillTimer
ShowWindow
IsDlgButtonChecked
CheckDlgButton
MessageBoxA
ExitWindowsEx
GetMessageA
PostQuitMessage
CreateDialogParamA
DispatchMessageA
IsWindow
IsDialogMessageA
PostMessageA
EndDialog
DialogBoxParamA
TranslateMessage
advapi32
RegCloseKey
RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
comctl32
ord17
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE