Static task
static1
Behavioral task
behavioral1
Sample
dca1d0f63b46e21b0e9f00067805cad3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dca1d0f63b46e21b0e9f00067805cad3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dca1d0f63b46e21b0e9f00067805cad3_JaffaCakes118
-
Size
79KB
-
MD5
dca1d0f63b46e21b0e9f00067805cad3
-
SHA1
b6b8300f6dd62a9d023cbbad5c5bbe43298e20de
-
SHA256
7af66b010c0f1ad3d373a5c2eaacefd675a60c30683b440469794685207a1bb5
-
SHA512
93d73556313252c6fefe673d8bb9d0018605eeb64df84ee956b8503620b89d7d3fe49cf296bbbddb04e6ec386021ae047da9d525b0cbdab47983836b79852f4c
-
SSDEEP
1536:SQEll4Q9QFSYrCIWx//jd67LjoKq05YbaYltoO3t6VFiyWLLnp7Xoq:W8SpIk/BGAKq0q/lSO30VcDp7Xoq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dca1d0f63b46e21b0e9f00067805cad3_JaffaCakes118
Files
-
dca1d0f63b46e21b0e9f00067805cad3_JaffaCakes118.exe windows:4 windows x86 arch:x86
87ff20f0bf0f615e7b6e531d8a4c01a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetModuleHandleA
DeviceIoControl
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
LoadResource
FindResourceW
GetACP
GetVersion
LockResource
QueryPerformanceCounter
GetCurrentProcessId
GetCPInfo
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStringTypeW
user32
GetClientRect
LoadIconA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
LoadCursorA
DefWindowProcA
FindWindowA
DestroyWindow
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetSysColorBrush
LoadStringA
GetSystemMetrics
wsprintfA
gdi32
TextOutA
Rectangle
CreateBitmap
advapi32
RegCloseKey
RegSetValueExW
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 55B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ