Static task
static1
Behavioral task
behavioral1
Sample
dcef2c45a56d685f5a4989f1e7bce028_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcef2c45a56d685f5a4989f1e7bce028_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcef2c45a56d685f5a4989f1e7bce028_JaffaCakes118
-
Size
392KB
-
MD5
dcef2c45a56d685f5a4989f1e7bce028
-
SHA1
9562851fc1b689678e584b7c2ba5bcedae72f53f
-
SHA256
4b2de8d4c30d579e060a5fa5ec48d620c741911f60d0acee52d0f2268a6bb8e0
-
SHA512
e7f95abd67d462db02a9fc530df0900a0296dcc2913a32adb8cf62565119ea700b2dd8501fed3de7a68be507da06fd356a23421dae6f495f6a00557393439a3d
-
SSDEEP
6144:EU2mGp9VUwTZtX02giP9YoRRQGb8gJCPankzjzVjyTVyS9m1D46a6zvNPD:ERjmwTZSihRQwJCi4zVWThB6a6zVb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcef2c45a56d685f5a4989f1e7bce028_JaffaCakes118
Files
-
dcef2c45a56d685f5a4989f1e7bce028_JaffaCakes118.exe windows:4 windows x86 arch:x86
c5c06dd10bf98b45867c4cde7ca3a109
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GlobalFree
HeapDestroy
CreateMutexA
FreeEnvironmentStringsA
CreateFileA
ExitThread
SetConsoleCursorInfo
LocalUnlock
TlsGetValue
GetACP
SetLastError
UnmapViewOfFile
LoadLibraryExW
ReleaseMutex
HeapCreate
FindClose
FindResourceA
Sleep
GetLastError
user32
DefWindowProcW
DispatchMessageA
CheckRadioButton
GetFocus
FillRect
DrawMenuBar
GetIconInfo
GetDC
DrawEdge
CallWindowProcA
CopyRect
IsWindow
GetDlgItem
uxtheme
DrawThemeIcon
GetThemeRect
DrawThemeEdge
GetThemeSysInt
DrawThemeText
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ