Static task
static1
Behavioral task
behavioral1
Sample
de78305adde9cc35954690e3493a6fb7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de78305adde9cc35954690e3493a6fb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de78305adde9cc35954690e3493a6fb7_JaffaCakes118
-
Size
170KB
-
MD5
de78305adde9cc35954690e3493a6fb7
-
SHA1
ce0aa44d492be38063292fc1de5c507fbbaf0265
-
SHA256
a98662b0e199427910b66e609d201f053a2c058597c823c91c8bd7015c4936d6
-
SHA512
eb952369fd87452e6ac997e84a655f9fda0ea2bb511e4babf1647f697e3899caa6676b5eead35fbdf5a8dc5bcbed3d6cbbf105a23b85311704cff76616de9007
-
SSDEEP
3072:96Kxq0i17tYjpOYiZ0d6SHtLJ8DOQPS8uPk3qHC:wKz8EpmVOLJ8PPS8uPdC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de78305adde9cc35954690e3493a6fb7_JaffaCakes118
Files
-
de78305adde9cc35954690e3493a6fb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
0adb6eb9ca16a09510a6c0832669004e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcAddress
LoadLibraryA
GetCommandLineA
HeapAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ