Static task
static1
Behavioral task
behavioral1
Sample
dc25ad6ea82ead807c117263edcb8802_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc25ad6ea82ead807c117263edcb8802_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc25ad6ea82ead807c117263edcb8802_JaffaCakes118
-
Size
1.0MB
-
MD5
dc25ad6ea82ead807c117263edcb8802
-
SHA1
9b1d22981acc00dd2783ee31fd358d811e3dd125
-
SHA256
c06f4e90ab0242f24b71599c7f061e8f9e37a6917c25cfb0ffe5e22cc02a7c34
-
SHA512
c1de6b6ecf537a467735d7438da22a8a20f3ac6a74e6aaf5e18ac67e69cd58c8f936b7cb33c48a509ac796a2def169a5dd3812c9a03e2f56cb8cf67ce6f14abf
-
SSDEEP
12288:KgxPQVTCN58LL5poPVqoOyPxW5kyK0BPdy1hlx6K9hQTXOWu4VD/k8fMl:K2QxCNKpuqoYKWsEK9hyXJl/7Ml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc25ad6ea82ead807c117263edcb8802_JaffaCakes118
Files
-
dc25ad6ea82ead807c117263edcb8802_JaffaCakes118.exe windows:4 windows x86 arch:x86
77d1ae42a3871ed63686405f5a277aa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
CreateEventA
FreeLibrary
GlobalFree
GetModuleHandleA
GetVersionExA
lstrcatA
GetLastError
LocalFree
GetCommandLineA
GetStartupInfoA
GlobalAlloc
LocalAlloc
GetTickCount
Sleep
user32
CreateWindowExA
GetWindowRect
SetFocus
DialogBoxParamA
BeginPaint
ScreenToClient
GetFocus
GetSysColor
MessageBoxA
EndDialog
GetMessageA
DefWindowProcA
DestroyWindow
Sections
.text Size: 1024B - Virtual size: 1023B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ