Static task
static1
Behavioral task
behavioral1
Sample
dc6697d94912ca70de32d8bd7717bd50_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
dc6697d94912ca70de32d8bd7717bd50_JaffaCakes118
-
Size
132KB
-
MD5
dc6697d94912ca70de32d8bd7717bd50
-
SHA1
1f8c869748933bc8c9a69cb25c3f0ea3f8071075
-
SHA256
0a05e728e40d80db4159ced8760ade6cc66cd1d1c3187bc389801f975ea356a5
-
SHA512
835224f4e306d911a86d647ea6c0a4d92e3ae53b5d0510a8d122c052ec576bf3f0f8b78dfb98a4d468ac6de71881756707c8ee5b56568603727a2076ba804d1b
-
SSDEEP
3072:fGtMGz044wJ/lvfrO9nsirVgMiNWcJZ9KzO9vgYRu9:uSGY44QHrqVrWDNWcYOZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc6697d94912ca70de32d8bd7717bd50_JaffaCakes118
Files
-
dc6697d94912ca70de32d8bd7717bd50_JaffaCakes118.exe windows:6 windows x86 arch:x86
cbf845b269dd337b04e8dac50e44baba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetTapeStatus
GetTickCount
TlsAlloc
CompareStringOrdinal
GetCurrentProcessId
TlsFree
GetCommandLineA
CancelSynchronousIo
FindActCtxSectionGuid
ReadFile
SetVolumeMountPointW
SetHandleCount
wininet
InternetOpenUrlW
winscard
SCardDisconnect
gdi32
SetTextColor
rpcrt4
I_RpcServerSetAddressChangeFn
wintrust
CryptCATAdminAddCatalog
user32
GetSystemMenu
SetClassWord
GetMenuItemRect
GetKeyboardType
ExcludeUpdateRgn
GetParent
GetLastInputInfo
shlwapi
PathIsRelativeA
crypt32
CertGetEnhancedKeyUsage
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WET_J Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
43B Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ