Static task
static1
Behavioral task
behavioral1
Sample
dcb6f043dd4e8d6bdd5a7ab24d4ec657_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcb6f043dd4e8d6bdd5a7ab24d4ec657_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcb6f043dd4e8d6bdd5a7ab24d4ec657_JaffaCakes118
-
Size
107KB
-
MD5
dcb6f043dd4e8d6bdd5a7ab24d4ec657
-
SHA1
9bf151020e520d6a1033d640e2653ab6b0b9ecb8
-
SHA256
733ca0bd9e0b441b379eec9aaf7dcdb75d60cc1b78090de9246bc0bd2b7b3ae4
-
SHA512
91ac2ea86616212314f698f7aa3a62cfb6797cc62e4b51e06303cd1783a6dfb6f9e6373a82e9ecd4c3c897e47e3a3a880c93bfb100557ae40ba7c429f630efcc
-
SSDEEP
3072:sqoTvDpBDmz0wyYLSsw4/0KF2IMLVe3c:sBTvtS0wFHwGF21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcb6f043dd4e8d6bdd5a7ab24d4ec657_JaffaCakes118
Files
-
dcb6f043dd4e8d6bdd5a7ab24d4ec657_JaffaCakes118.exe windows:4 windows x86 arch:x86
452e807d179221a69a9f39536182a2fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL
gdi32
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW
shell32
StrRChrIA
SHFormatDrive
SHAppBarMessage
Sections
.text Size: 24KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE