Static task
static1
Behavioral task
behavioral1
Sample
dcce358bdf1103a17575908c5c32b9ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcce358bdf1103a17575908c5c32b9ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcce358bdf1103a17575908c5c32b9ad_JaffaCakes118
-
Size
328KB
-
MD5
dcce358bdf1103a17575908c5c32b9ad
-
SHA1
a05a27a13ae152c81242b79787bc0e3ac26c14fa
-
SHA256
6ad7265d06c4e4c43a16732b79d2682542ed5488ae068b388394d009988d1b37
-
SHA512
d5d20424f1757b29ef8bf51050bcafc4f288fad6a298e308d5f8ebf2138a70c58c8a16a434dd3210c08d296771b9ea53e8a3489ed392b48904f804d19b92a7ed
-
SSDEEP
6144:OQxVpBMDHXxy+CdFr/GJS0hGaMUXjyIU4Ozwp05M8:j7OD3wDjTGJZcatjQXzksM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcce358bdf1103a17575908c5c32b9ad_JaffaCakes118
Files
-
dcce358bdf1103a17575908c5c32b9ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e5384bcb692d43439edd256a5982aa2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetTickCount
HeapReAlloc
GetStdHandle
SuspendThread
WaitForSingleObject
HeapCreate
GetSystemDefaultLangID
CloseHandle
GetConsoleCP
InterlockedExchange
SearchPathA
WaitForMultipleObjects
lstrlenA
GetAtomNameA
GetVersion
SetConsoleCP
GlobalUnlock
GetModuleHandleA
VirtualProtect
GetCommandLineA
user32
SetPropA
DrawCaption
GetCursorInfo
CopyImage
GetDlgItem
InvertRect
GetKeyState
FindWindowA
SetScrollInfo
SetWindowPos
DispatchMessageA
GetKeyboardLayout
InsertMenuA
DialogBoxParamA
MessageBoxA
IsDialogMessage
CreateMenu
CreateIcon
DispatchMessageA
DragObject
CreateCursor
EnableScrollBar
DestroyMenu
advapi32
RegQueryInfoKeyA
RegEnumKeyA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ