Static task
static1
Behavioral task
behavioral1
Sample
df6cae3a25e0c91c0b67af2d95c4b180_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df6cae3a25e0c91c0b67af2d95c4b180_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df6cae3a25e0c91c0b67af2d95c4b180_JaffaCakes118
-
Size
10.3MB
-
MD5
df6cae3a25e0c91c0b67af2d95c4b180
-
SHA1
a69b4d0eee520088530450c8554156b36ba7a97d
-
SHA256
3014ef4b0d4a15a4bbb95b95a236b4895e7274f7f3a940930d475a61a9678992
-
SHA512
6d56698b7f9123459858cdcf76dc438dd7ffd8d0da870b6784ac595e9778dc3bf366a4fe5eb972578f64338d01ba2206f669a998b73989396ee8ddbd69064347
-
SSDEEP
196608:srD7JVtJPV1QqgwbN9hMbNvKzOazXGMEHpZ6CAXZMvqbogwr:83JnJPHQeB9abdkTDG94ZMeoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df6cae3a25e0c91c0b67af2d95c4b180_JaffaCakes118
Files
-
df6cae3a25e0c91c0b67af2d95c4b180_JaffaCakes118.exe windows:4 windows x86 arch:x86
35302195f753b1e30e90761078b3295e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalReAlloc
GetTempPathA
CloseHandle
WriteFile
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
CreateDirectoryA
GlobalAlloc
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
lstrcmpA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
GetModuleFileNameA
FindClose
user32
wsprintfA
MessageBoxA
CharLowerA
shell32
ShellExecuteExA
advapi32
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.2MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ