Static task
static1
Behavioral task
behavioral1
Sample
ded9889f296769f597bcf14257ac911a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ded9889f296769f597bcf14257ac911a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ded9889f296769f597bcf14257ac911a_JaffaCakes118
-
Size
240KB
-
MD5
ded9889f296769f597bcf14257ac911a
-
SHA1
982693b0b05edf2a6d2074a1cf58eaa901460ff5
-
SHA256
85749a8f4da25100b3de0cd762c80080b34ebaedeb7cef502fbca30e9fd6f979
-
SHA512
a44cba35d769cb5cf971d2f663db73d4979b740dfd268cbfb8e60719f344c0903ecbab7945a4d2be100cfd2f8018a9c757503fb6ca2ea241ac6bfb5d35ac71c1
-
SSDEEP
6144:zNuRbHClIfFFdAS6yJGaoYVScGMqNqWLSo06xP:zCzClINFmnyfXSDMqbzfxP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded9889f296769f597bcf14257ac911a_JaffaCakes118
Files
-
ded9889f296769f597bcf14257ac911a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afb42e8b00e7403d30dd26c8dd74aad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleCursorMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
oleaut32
DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
wininet
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile
shell32
ShellExecuteExA
SHAppBarMessage
Shell_NotifyIconA
FindExecutableA
ShellExecuteA
SHGetFolderPathA
CommandLineToArgvW
msvfw32
ICInfo
ICOpen
ICSendMessage
ICClose
ICGetInfo
Sections
.text Size: 149KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE