Static task
static1
Behavioral task
behavioral1
Sample
dca434493e774ccc4f8ce5fe9cdc3b8c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dca434493e774ccc4f8ce5fe9cdc3b8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dca434493e774ccc4f8ce5fe9cdc3b8c_JaffaCakes118
-
Size
38KB
-
MD5
dca434493e774ccc4f8ce5fe9cdc3b8c
-
SHA1
f88942d650fc627cce7c48f6be20fd3f18097065
-
SHA256
8e00901ef3c539d28d96ace9f3d5b8c71a14eda415c526156a425150dabf53a7
-
SHA512
e6f6fd394a0f1ff3df60d97ce72150f68af1f5eb6858c20428a04f6b2841d82edf8056390224355626c886dfaf7a5168c1e218f610fb4a2b849cb3a8c5552967
-
SSDEEP
768:2Fy6uTBJmOWFW/YtBvJkRdlannjD+90kL/boY6qgCffX9:2F2m/htELl+/kjkY6qgCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dca434493e774ccc4f8ce5fe9cdc3b8c_JaffaCakes118
Files
-
dca434493e774ccc4f8ce5fe9cdc3b8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4cb365bf8896ad5504311f6bd768552b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualProtect
GetBinaryTypeA
HeapFree
DnsHostnameToComputerNameA
GetConsoleCommandHistoryLengthW
CancelWaitableTimer
Thread32Next
IsBadStringPtrW
FormatMessageA
CreateJobObjectW
DuplicateHandle
CopyFileExA
GetNlsSectionName
FindVolumeMountPointClose
AssignProcessToJobObject
GlobalFindAtomA
FindNextVolumeW
user32
GetWindowModuleFileNameW
DialogBoxParamA
IsWindowUnicode
FrameRect
DdeEnableCallback
GetKeyboardLayoutNameA
CreateIconFromResourceEx
ImpersonateDdeClientWindow
ChildWindowFromPoint
GetTaskmanWindow
GetMenuDefaultItem
SetUserObjectInformationA
VkKeyScanExW
DeviceEventWorker
DestroyMenu
GetKeyboardLayoutList
PrivateSetDbgTag
DdeInitializeW
SetWindowWord
GetWindowDC
DdeAbandonTransaction
RemovePropA
IsIconic
gdi32
GdiGetPageHandle
TextOutW
GetGlyphOutline
GdiConvertEnhMetaFile
GdiQueryTable
GetFontUnicodeRanges
GetMetaRgn
ExcludeClipRect
SetMapMode
SetWindowOrgEx
SelectObject
PolyDraw
ColorMatchToTarget
RealizePalette
SetPolyFillMode
comdlg32
ReplaceTextW
PrintDlgExA
GetOpenFileNameW
ReplaceTextA
dwLBSubclass
FindTextA
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameW
dwOKSubclass
PrintDlgExW
PageSetupDlgW
PrintDlgW
PageSetupDlgA
GetFileTitleA
GetFileTitleW
ChooseFontW
FindTextW
Ssync_ANSI_UNICODE_Struct_For_WOW
LoadAlterBitmap
Sections
.text Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE