_KHKECQOXWT@0
Static task
static1
Behavioral task
behavioral1
Sample
dd8173a0f5bc028be3fd167924622bc3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd8173a0f5bc028be3fd167924622bc3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd8173a0f5bc028be3fd167924622bc3_JaffaCakes118
-
Size
108KB
-
MD5
dd8173a0f5bc028be3fd167924622bc3
-
SHA1
54d9c50323890bce57209feca44b43e78524d439
-
SHA256
db8ae563c726f6c645d23124a6df26619695db0076d1e36cf541f3addb68f130
-
SHA512
97339f679f139f45104c5cf184b2f3fa19f5db5ee2e7d6b2bc861c0ab56a894292f8d8bd7f2af8263f2366e86c087c42bca5d1a3f26a0beee3425616e7be1e58
-
SSDEEP
3072:E3xK8TjKwHwdoNhcXPxAo8YliW7ccnw6U3Cvgul:OxJTd4ciX5J8YliW7BfsDu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd8173a0f5bc028be3fd167924622bc3_JaffaCakes118
Files
-
dd8173a0f5bc028be3fd167924622bc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f2fbf7b3940777ff3a754f25639392d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
LoadResource
LockResource
SizeofResource
CopyFileW
GetSystemWindowsDirectoryW
QueryPerformanceCounter
GetTempFileNameW
CreateFileW
InitializeCriticalSectionAndSpinCount
DebugBreak
HeapSize
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
GetLastError
SetEvent
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
Sleep
UnregisterWait
GetVersion
GetCurrentThread
CreateFileMappingA
MapViewOfFile
GetSystemInfo
IsBadReadPtr
VirtualAlloc
UnmapViewOfFile
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
RaiseException
GetVersionExA
GetModuleFileNameW
lstrcmpW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedIncrement
DeleteFileW
LocalFree
CreateDirectoryW
CreateThread
WaitForMultipleObjects
GetExitCodeThread
WaitForSingleObject
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
CreateFileA
DeviceIoControl
FreeLibrary
ChangeTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
QueueUserWorkItem
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
CreateEventW
InterlockedDecrement
GetStartupInfoA
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ