Static task
static1
Behavioral task
behavioral1
Sample
dbc0ec71b1ae6208327846a28b1c9d05_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbc0ec71b1ae6208327846a28b1c9d05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbc0ec71b1ae6208327846a28b1c9d05_JaffaCakes118
-
Size
32KB
-
MD5
dbc0ec71b1ae6208327846a28b1c9d05
-
SHA1
5008ae3a1da9964c9acd8c716d625a7923ac6b5c
-
SHA256
e1dbf3357d15b19881e38a453299b7746c4027831818a7f4e9a6ad4f801e166d
-
SHA512
aad17d3140dea296fecf48a380da146368f0762208658d7da8281e5c4688b580d4909b87df60be833fd8855c5e27a7991e15a67219ba7c40feea5ca754a1aea5
-
SSDEEP
384:HChnr8w86hwJd2lurgvIQQ2mXfpJgLa0Mp8885UGnYCIlD07QtY/9:HEnr8wjiolCg0gLa1H4nYdlo7QtQ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbc0ec71b1ae6208327846a28b1c9d05_JaffaCakes118
Files
-
dbc0ec71b1ae6208327846a28b1c9d05_JaffaCakes118.exe windows:4 windows x86 arch:x86
6d93855744b62a8b36d3946db1ce38e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
lstrlenA
ReadFile
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
ExitThread
Sleep
DeleteFileA
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetProcessHeap
WaitForSingleObject
GetProcAddress
LoadLibraryA
WriteFile
SetFilePointer
CloseHandle
SetEvent
ResetEvent
lstrcmpA
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CompareStringA
CreateEventA
CreateThread
CreateProcessA
SizeofResource
LoadResource
FindResourceA
lstrcpyA
user32
GetWindowLongA
wsprintfA
GetTopWindow
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegNotifyChangeKeyValue
wininet
InternetGetConnectedState
iphlpapi
GetAdaptersInfo
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ