Static task
static1
Behavioral task
behavioral1
Sample
dd0bcd657af594f2171474682244fa92_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd0bcd657af594f2171474682244fa92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd0bcd657af594f2171474682244fa92_JaffaCakes118
-
Size
130KB
-
MD5
dd0bcd657af594f2171474682244fa92
-
SHA1
047e2b59a16d29d4990991f4afece45d691c7f37
-
SHA256
f211c67952302bf2366ef00bd63c564b56888f13e289d898f0c7f771c4612df0
-
SHA512
60b6b630ac09c222576ba385de839913fe59ad152fd6227e33cbd2ac118e22e445f5da4fe6cd144e3aa7986d7573b8a0895be29519c53bfbd00254c60a29112b
-
SSDEEP
1536:Nc05seI/y2xlCWubdW8t08xUfFQkd1Z5AXzEzU3xQGzrV3A3wqoYS/dfEAwYPEA9:DQfCdLUaA10jEQWG3luwlBvPV4JCJB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd0bcd657af594f2171474682244fa92_JaffaCakes118
Files
-
dd0bcd657af594f2171474682244fa92_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ebe89e98cc47487ec2cd7b6a9ff956d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetLastError
GetDriveTypeW
LoadLibraryExW
GetDiskFreeSpaceExA
IsBadStringPtrA
VirtualProtect
DeleteCriticalSection
EnumResourceTypesW
FreeConsole
LocalFree
GetDateFormatA
CloseHandle
ResetEvent
GetCommandLineA
FindClose
GetLastError
IsBadReadPtr
CancelIo
TlsGetValue
advapi32
OpenEventLogA
GetFileSecurityW
LsaFreeMemory
IsTokenUntrusted
LsaClose
FreeSid
GetLengthSid
RegEnumKeyExA
AccessCheck
RegCloseKey
RegCreateKeyExA
CloseEventLog
CloseTrace
RegCloseKey
hnetcfg
HNetGetSharingServicesPage
HNetFreeSharingServicesPage
HNetDeleteRasConnection
DllGetClassObject
DllRegisterServer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ