Static task
static1
Behavioral task
behavioral1
Sample
def5d0ce8054cf2b27c0f5336837773d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
def5d0ce8054cf2b27c0f5336837773d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
def5d0ce8054cf2b27c0f5336837773d_JaffaCakes118
-
Size
472KB
-
MD5
def5d0ce8054cf2b27c0f5336837773d
-
SHA1
33839dfa8499e96c7d868235270aa4724658c0ee
-
SHA256
f593cbfa41ec2369450b3d1e6a2f55a1d9954b828ee209522b356a6e9cff82f5
-
SHA512
4c2007475efba75f24c90598b7adda19ee21b9cbeb6baea483047e0946c48b59ab156b5f1bad518c7eaec330de23bc63d59aea11879f2489b342d3a6538c38a2
-
SSDEEP
6144:SxBuhj458hku4G9W7/+Y3xgV/ZG3syrGKv1XGg9cBmuSo2s2S45hVxplM0e:GUhkOk7mY3xf3vW8cBmuSo2s2rxplS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def5d0ce8054cf2b27c0f5336837773d_JaffaCakes118
Files
-
def5d0ce8054cf2b27c0f5336837773d_JaffaCakes118.exe windows:4 windows x86 arch:x86
542ba18ba25cb39c5ca79ac78686a992
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
DispatchMessageW
LoadCursorW
RegisterClassExW
BeginPaint
GetWindowRect
MoveWindow
PostQuitMessage
MessageBoxW
DefWindowProcW
DestroyWindow
SendMessageW
LoadStringW
CreateWindowExW
DestroyCursor
GetDlgItemInt
LoadAcceleratorsW
EndPaint
GetMessageW
SetMenuItemInfoW
GetClassNameW
SetMenu
PtInRect
InflateRect
DrawIcon
InsertMenuItemW
GetDesktopWindow
GetDCEx
SetScrollRange
GetActiveWindow
GetDlgItemTextW
RedrawWindow
InsertMenuW
GetDlgCtrlID
GetFocus
GetScrollRange
kernel32
WriteFile
lstrlenA
lstrcmpA
CloseHandle
GetFileSize
GetModuleHandleW
GetStartupInfoA
GetLastError
GetModuleHandleA
GetCurrentDirectoryW
lstrlenW
GetCommandLineW
lstrcpyW
CreateFileMappingW
CreateFileW
gdi32
TextOutW
shell32
ExtractIconW
CommandLineToArgvW
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
Sections
.text Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ