Static task
static1
Behavioral task
behavioral1
Sample
dc436d5d47a2febc4ff3ad9ecf69e1c9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc436d5d47a2febc4ff3ad9ecf69e1c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc436d5d47a2febc4ff3ad9ecf69e1c9_JaffaCakes118
-
Size
68KB
-
MD5
dc436d5d47a2febc4ff3ad9ecf69e1c9
-
SHA1
da6e40b8ee8a81f8a72be3ede1ea2f1491b098ec
-
SHA256
49d1fea6ef80b388cf3bb45715566fef8fc87db4cdd758a6bacb536c513ca84f
-
SHA512
c729eee3bc000ec3ae7bce0257668a3aea64c3ece5343f3157316139321294a84753ed7228ae1c1ed8066fd72bde619d475fce3ee50ee2c9462c8d8e50f2e1e4
-
SSDEEP
768:vc2uA0kMZIfXtn6obJzex1J/M06I7cKtrwaLSikythh4IC6YSBg23oy:vc2u2fXzbMeKxXCAC6RJoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc436d5d47a2febc4ff3ad9ecf69e1c9_JaffaCakes118
Files
-
dc436d5d47a2febc4ff3ad9ecf69e1c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
cd4fe120d365fbd6ac1625c6f2e7b5de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
FindClose
GetLastError
CreateFileA
CloseHandle
SetFileTime
GetFileTime
SetFilePointer
ReadFile
WriteFile
GetFileSize
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE