Static task
static1
Behavioral task
behavioral1
Sample
dd628676e280637352011db3ffd74745_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd628676e280637352011db3ffd74745_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd628676e280637352011db3ffd74745_JaffaCakes118
-
Size
22KB
-
MD5
dd628676e280637352011db3ffd74745
-
SHA1
d8bf80981aa4c71ca1eec264753b96746ca39165
-
SHA256
94be77e574995e70598e5bc2bd92ee6f5f428eb22590191d27be9252f4311f2b
-
SHA512
6a5f0134b3658657a51d526f07e349df840b27b8b486ae28166db6bfb558588e78aab99a19301523cb7ad677298bd23b02d6ab4b89e117acc7a795b7c3b3a7f8
-
SSDEEP
192:cYesg217gwfLlBbQYXdnkviC5Y9eRKDuwQwFNurqBaI9JHzic+5MMxMn:qsg213L9kvaeRKDdoI9JHV+5M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd628676e280637352011db3ffd74745_JaffaCakes118
Files
-
dd628676e280637352011db3ffd74745_JaffaCakes118.exe windows:4 windows x86 arch:x86
3173a4d9cce348a2421f41f9fe4b3e22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetCurrentThread
VirtualAlloc
GetCurrentProcessId
GetModuleFileNameA
TlsFree
GetModuleHandleW
IsDBCSLeadByte
GetLogicalDrives
TlsGetValue
GetOEMCP
GetDriveTypeW
GetACP
lstrcpyA
GetUserDefaultLCID
GetSystemDefaultLCID
CreateProcessInternalA
FreeLibrary
TlsSetValue
GetCurrentThreadId
GetCommandLineA
user32
GetActiveWindow
GetDC
ShowWindow
GetWindowTextLengthA
GetSystemMetrics
UpdateWindow
GetWindowTextA
GetWindow
RegisterClassA
ReleaseDC
BeginPaint
IsWindowVisible
GetWindowLongA
IsIconic
GetClassInfoExA
GetForegroundWindow
CloseWindow
GetFocus
GetWindowDC
imagehlp
ImageNtHeader
CheckSumMappedFile
FindFileInPath
BindImage
FindDebugInfoFile
ImageLoad
oleacc
GetRoleTextA
DllGetClassObject
GetStateTextA
LresultFromObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ