Static task
static1
Behavioral task
behavioral1
Sample
dcc0d02b0936131d89752daf8cca3b5c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dcc0d02b0936131d89752daf8cca3b5c_JaffaCakes118
-
Size
578KB
-
MD5
dcc0d02b0936131d89752daf8cca3b5c
-
SHA1
195c29cfbd04f7bf2e2c90c930f34c712f436883
-
SHA256
24d775cde5e5b069948e25d7e38ba2bc41326e5a06ef33c653b958956ce8bab6
-
SHA512
6a57105a0d6db92e3dce0b429f228b78626f94610103cefdd7a1fb051b9d032dca56ebd2adbfef177d6ff050e30045c152e7791d4f137daa4b2923ce7b4bdacc
-
SSDEEP
6144:XHujQMxnzItdLPrBF4sMh1dvQYn2s7V6LR98iTpkG6qKBvw3EBXF48gEg8D/zoM:XOXxnzIz9MyA1MR9zpkD7RwyXWEg8Db
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcc0d02b0936131d89752daf8cca3b5c_JaffaCakes118
Files
-
dcc0d02b0936131d89752daf8cca3b5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
b33854b187781bc48d143f9b1e21fb79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongW
LoadStringW
SetWindowTextW
FindWindowW
SetForegroundWindow
IsIconic
ShowWindow
GetSystemMetrics
UpdateWindow
GetMessageW
DispatchMessageW
PostQuitMessage
CreateWindowExW
SendMessageA
DestroyWindow
PostMessageA
DefWindowProcW
RegisterClassW
GetWindowRect
DrawTextW
GetClassNameW
GetWindowPlacement
GetWindowTextW
kernel32
SetHandleCount
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
CreateFileW
GetStartupInfoA
WideCharToMultiByte
CloseHandle
GetTickCount
ExitProcess
GetLastError
GetModuleHandleW
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
ole32
CoInitialize
CoCreateInstanceEx
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ