Static task
static1
Behavioral task
behavioral1
Sample
ddaaee5cc82a633d3bf2c65a120ed21c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddaaee5cc82a633d3bf2c65a120ed21c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddaaee5cc82a633d3bf2c65a120ed21c_JaffaCakes118
-
Size
49KB
-
MD5
ddaaee5cc82a633d3bf2c65a120ed21c
-
SHA1
ac939b2935ef945ebba5ab19033d5e155acd092e
-
SHA256
785a692b5b92b1a24d395ae7da3aeaa1074a990de672ab6071db68a85fdc23a1
-
SHA512
cb26455d7f3e4782f9df1c34e1ad76a0e78697c55a5ae9d060c475f2e472cffeec7d3fc699c97f6502675a83f35dd1aa3c3e884d08fc4c61c20b1a4df91aa63c
-
SSDEEP
768:PfhSiXUnKxKtfSdaTF2TW34PqBrWBQEOEhvOlJ:patfSAiPqBrWuvlJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddaaee5cc82a633d3bf2c65a120ed21c_JaffaCakes118
Files
-
ddaaee5cc82a633d3bf2c65a120ed21c_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4705cb796d7f46cefca95f4ab2ce252
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FreeResource
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
WaitForSingleObject
WideCharToMultiByte
WriteFile
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
shell32
ShellExecuteA
user32
CharLowerBuffW
CharUpperBuffW
MessageBoxA
ShowWindow
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE