Static task
static1
Behavioral task
behavioral1
Sample
de9644f8e683dd0114f383b5a488a247_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
de9644f8e683dd0114f383b5a488a247_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de9644f8e683dd0114f383b5a488a247_JaffaCakes118
-
Size
123KB
-
MD5
de9644f8e683dd0114f383b5a488a247
-
SHA1
bdd14ff98a34f306cc1f6bac388be65e8884d3c1
-
SHA256
58e7063be952afd8aeccecd6a6f4f2ff4ccada7d32137977dc0a7417fc633dec
-
SHA512
a24838fd7090cd9f27396eb960f7809d588df0c3e21be3f5326006bfe82a942b541d1eefbfc81b0f97cbc29e32931b7088c8760c8ad16129e5ba91919f5b08d9
-
SSDEEP
3072:xeSVk/+6jj3OIBKXH2XNfNRp0OYMYdGJPPECuBRkO09:0S+1zsH2ptboGJ3cB8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de9644f8e683dd0114f383b5a488a247_JaffaCakes118
Files
-
de9644f8e683dd0114f383b5a488a247_JaffaCakes118.exe windows:4 windows x86 arch:x86
dd0a3a76d0ed3283e72cacd4845233c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetFileInformationByHandle
HeapFree
HeapReAlloc
GlobalReAlloc
OpenFile
LocalReAlloc
lstrcpyA
FlushFileBuffers
HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
HeapCreate
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
SetEndOfFile
GetCommandLineA
GetACP
GetVersion
SetHandleCount
GetLastError
CloseHandle
CreateFileA
GetModuleHandleA
GetStartupInfoA
HeapAlloc
ReadFile
GetModuleFileNameA
ExitProcess
GetFileType
WriteFile
GetStdHandle
SetFilePointer
SetStdHandle
DeleteFileA
GetFileAttributesA
SetConsoleCtrlHandler
version
VerQueryValueA
wsock32
__WSAFDIsSet
advapi32
GetAce
AllocateAndInitializeSid
StartServiceCtrlDispatcherA
gdi32
GetTextMetricsA
TextOutA
GetStockObject
GetDeviceCaps
user32
SetTimer
CreateDialogParamA
RegisterClassA
DispatchMessageA
TranslateMessage
LoadIconA
GetMessageA
LoadCursorA
EndDialog
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
PostQuitMessage
DefWindowProcA
IntersectRect
KillTimer
DialogBoxParamA
ShowWindow
UpdateWindow
CreateWindowExA
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ