Static task
static1
Behavioral task
behavioral1
Sample
dfa4fa6f1c235b71f62c4e7079aa3c88_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfa4fa6f1c235b71f62c4e7079aa3c88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfa4fa6f1c235b71f62c4e7079aa3c88_JaffaCakes118
-
Size
384KB
-
MD5
dfa4fa6f1c235b71f62c4e7079aa3c88
-
SHA1
ab3f2ad19d12cec94f7ccd3ac42ae9d6d8ccf5df
-
SHA256
004f7ee8842b5caa8b8d0dcf226091f3cebe8f95710a31b94d6ae1f17e8a0b17
-
SHA512
185e9e828e7cc86691e0549db109e848afa0cadce31d639bc1dcbb62df955ae2636f53ca25db1edf4b8c219d674d21fd32747dd0b3a6f86794e8d592c395a0cc
-
SSDEEP
12288:AEi9mEVbZx9itsj74OE/fizstwSpo6UbdL6/:DEFZx9z7F6fig5odbdu/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa4fa6f1c235b71f62c4e7079aa3c88_JaffaCakes118
Files
-
dfa4fa6f1c235b71f62c4e7079aa3c88_JaffaCakes118.exe windows:5 windows x86 arch:x86
96b079c646f4a6a8850314ef01080390
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatW
PulseEvent
GetProcAddress
GetModuleHandleW
user32
GetMenuCheckMarkDimensions
CharUpperBuffW
advapi32
AllocateAndInitializeSid
Sections
W Size: 2KB - Virtual size: 848B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
C Size: 2KB - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T Size: 2KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9102 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T Size: 2KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T Size: 2KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HAi Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ