Static task
static1
Behavioral task
behavioral1
Sample
df9d7a583e8c6e7b77eed6407de1b264_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df9d7a583e8c6e7b77eed6407de1b264_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df9d7a583e8c6e7b77eed6407de1b264_JaffaCakes118
-
Size
175KB
-
MD5
df9d7a583e8c6e7b77eed6407de1b264
-
SHA1
cc19b70fbf1c7c4619862ab0d35b6f5e4c880596
-
SHA256
44bd8812f3720c850767a30b347471aa2911d15e84abda6268ea9bbb2abfbb99
-
SHA512
08cfffd1094e6e795792fee039f66fabe0c449b4ca148a8f88cc22fecb32d8b956115a118cee1b2f07163ee750e46702530fdb4d698a1b8227a05d6d210eae6c
-
SSDEEP
3072:ND3dBOFNcn6Tszk84c+Yqs5eS3E5fcam22H/rtQzOUoiSO4+P4BfbhkHp21:FINW6TsI7Nk8iE5fcacz6aVR+P4BTb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df9d7a583e8c6e7b77eed6407de1b264_JaffaCakes118
Files
-
df9d7a583e8c6e7b77eed6407de1b264_JaffaCakes118.exe windows:4 windows x86 arch:x86
5eaf2b6394ef9bd3bb164a1a3dae9d1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GlobalFree
LocalFree
DeleteAtom
WriteProfileStringA
GlobalAddAtomA
RaiseException
VirtualAlloc
HeapCreate
GlobalUnlock
lstrcat
LoadLibraryExA
EnterCriticalSection
GetLastError
GetOEMCP
SetCommBreak
GetStdHandle
LoadResource
IsBadCodePtr
SetConsolePalette
GlobalAddAtomA
user32
GetForegroundWindow
EndPaint
GetWindowTextLengthA
GetWindowTextA
CloseWindow
ReleaseDC
GetWindow
GetParent
AlignRects
ShowWindow
BeginPaint
GetFocus
IsIconic
GetClassNameA
GetClassInfoExA
GetActiveWindow
ValidateRect
GetDC
DrawEdge
wsock32
WSAStartup
WSAGetLastError
WSACleanup
WSASetBlockingHook
WSAAsyncGetServByPort
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ