Static task
static1
Behavioral task
behavioral1
Sample
de3ccf8f81d85e58cd8aca53c663526b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3ccf8f81d85e58cd8aca53c663526b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de3ccf8f81d85e58cd8aca53c663526b_JaffaCakes118
-
Size
128KB
-
MD5
de3ccf8f81d85e58cd8aca53c663526b
-
SHA1
7c4856e4ddbbd7543697644a6d5e745beb3ddc9c
-
SHA256
e4bcefbd8b71907a201fa175ad8441ec74f3e600dbbda7506ce647bf744e679c
-
SHA512
2a0539acd14f09e41339ce3b86982e0eec24176f945aed3e3bc3569c7e496c937083054b7a3de22a5a562047c7e85a7b34f96930b79effefbcfec20456157c19
-
SSDEEP
384:rOTDT0+jWaR2DC92yglZ7jur69JSZyQ3ErF6oZcAz:rOr0+j1L8RMZd3qF6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3ccf8f81d85e58cd8aca53c663526b_JaffaCakes118
Files
-
de3ccf8f81d85e58cd8aca53c663526b_JaffaCakes118.exe windows:4 windows x86 arch:x86
144c00be075a0bab718312335228d081
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
ole32
CoCreateInstance
CoInitialize
kernel32
GetFileType
HeapDestroy
GetVersionExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetOEMCP
GetEnvironmentVariableA
GetStringTypeW
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetProcAddress
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE