Static task
static1
Behavioral task
behavioral1
Sample
de99962a180b186223b3e469139c382a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de99962a180b186223b3e469139c382a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de99962a180b186223b3e469139c382a_JaffaCakes118
-
Size
287KB
-
MD5
de99962a180b186223b3e469139c382a
-
SHA1
55989072d547265eb162c85ff37643e80775bc8e
-
SHA256
00f76e4229966220a2a12894fecd02b381d15475214dcdb0688d08cffa8982fb
-
SHA512
2cea9dbd487671d893f443353def294f512e2a34305a8259342a5371eef6f8ddde69ef02417896ea4edefd63d0542dd7402740008d913abd4e87f16a232731f1
-
SSDEEP
6144:J6Z64o9ttjG4KD8Vi2S1hkXCDzmLIUCzh86pJlB2E:c64ojVi2ElXlcs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de99962a180b186223b3e469139c382a_JaffaCakes118
Files
-
de99962a180b186223b3e469139c382a_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e2764833f8055c9b19cf6ec49b71c68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
rpcrt4
UuidCreate
kernel32
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GlobalFindAtomW
GetCurrentThreadId
GetLocaleInfoW
LocalAlloc
SetUnhandledExceptionFilter
InterlockedExchange
GetModuleHandleW
EnumResourceLanguagesA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
InterlockedCompareExchange
QueryPerformanceCounter
UnhandledExceptionFilter
GetPrivateProfileIntW
FoldStringW
VirtualProtect
GetStartupInfoA
IsDebuggerPresent
DeleteFileW
shlwapi
GetAcceptLanguagesA
PathRemoveFileSpecW
PathCreateFromUrlW
UrlCreateFromPathW
PathAppendW
PathIsRelativeW
PathFindExtensionW
UrlUnescapeW
StrCmpIW
PathCombineW
Sections
.text Size: 150KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ