Static task
static1
Behavioral task
behavioral1
Sample
df9bf48fd5a564a98f24a073088853a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df9bf48fd5a564a98f24a073088853a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df9bf48fd5a564a98f24a073088853a6_JaffaCakes118
-
Size
367KB
-
MD5
df9bf48fd5a564a98f24a073088853a6
-
SHA1
e213aa2540f7eba27474cafe2dd66c166d517988
-
SHA256
88dfa50355fd05d440dfc217065dd7d298b994b0e1cc7e737d6d36530ad50ff2
-
SHA512
0941373485e00481caafdb15939403aa1ac54d33463a2e20235946bc44bd392f5271e9ca60c0c2f5acc49e39f7cc16a6949aaffce6e6a829ab5a28c921a3eb5b
-
SSDEEP
6144:qRMNhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:qRMzrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9bf48fd5a564a98f24a073088853a6_JaffaCakes118
Files
-
df9bf48fd5a564a98f24a073088853a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
022b503292a82776f6d262562ae68a63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomW
GetCurrentProcessId
GetModuleHandleA
GetCurrentThreadId
ResumeThread
SetLastError
GetDriveTypeW
EnterCriticalSection
GetModuleFileNameA
ReadFile
lstrlenW
GetConsoleAliasW
HeapCreate
TlsGetValue
SetEvent
GetPrivateProfileStringW
LocalFree
EnumCalendarInfoW
GetNumberFormatW
FindClose
user32
SetFocus
GetMenuInfo
IsWindow
GetCursorInfo
CallWindowProcW
GetKeyboardType
GetSysColor
GetClientRect
GetClassInfoA
DispatchMessageA
DrawTextA
GetKeyState
DispatchMessageA
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ