Static task
static1
Behavioral task
behavioral1
Sample
dcde8ff7dd22f88892bd9ffd2324f2ef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcde8ff7dd22f88892bd9ffd2324f2ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcde8ff7dd22f88892bd9ffd2324f2ef_JaffaCakes118
-
Size
241KB
-
MD5
dcde8ff7dd22f88892bd9ffd2324f2ef
-
SHA1
b2da15b510a925cd7ad72ada5183c778fb3e948e
-
SHA256
0a37dcb2d84739f603183e142b354d9e0b9721cf03e7d89b346d5dccadb0fe4e
-
SHA512
345590d5128dcffa77dbb9b425c70b7fd13f6e9f7de58dbc05d02568a6cfeaea61d854e2e16408e49347ab6651482a7d7cf010b077988533917372911358ec18
-
SSDEEP
3072:KVKTXYRsrcoASRvC2+ZCJqmS2hmy38T63RIqzNg2FI4/7rfNSfO:Ks0RsFlvC2B3Ay38GB55TrgfO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcde8ff7dd22f88892bd9ffd2324f2ef_JaffaCakes118
Files
-
dcde8ff7dd22f88892bd9ffd2324f2ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
e19baf3e37c6c22549ed8795d8104e72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
LocalSize
GetOEMCP
GlobalLock
VirtualAlloc
GlobalFindAtomA
LoadLibraryExA
GlobalAddAtomA
GlobalFree
GetProcessHeap
SetCommBreak
GlobalCompact
GetCommState
ExitThread
CloseHandle
GetProfileStringA
lstrcpyn
EnterCriticalSection
RaiseException
LoadResource
DeleteAtom
user32
GetClassInfoExA
GetFocus
GetActiveWindow
AlignRects
GetDC
GetWindowTextLengthA
GetWindow
ShowWindow
IsIconic
DrawEdge
GetParent
EndPaint
BeginPaint
CloseWindow
ValidateRect
GetClassNameA
ReleaseDC
GetForegroundWindow
GetWindowTextA
wsock32
WSACleanup
WSAStartup
WSASetBlockingHook
WSAGetLastError
WSAAsyncGetServByPort
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ