Static task
static1
Behavioral task
behavioral1
Sample
dfec3ad100bf31b7a348c61bc708f6ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfec3ad100bf31b7a348c61bc708f6ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfec3ad100bf31b7a348c61bc708f6ba_JaffaCakes118
-
Size
120KB
-
MD5
dfec3ad100bf31b7a348c61bc708f6ba
-
SHA1
7bdcbd9d17ce96cd8c3147acf185dcc1a9071a12
-
SHA256
d35bb252d8ad998356fa1b7615634a711efbbc1f0b3e2474110241d8764d4b74
-
SHA512
1fbeadf0d34e1f296fd15649bcebc28f018bd114250607937fe723cc7f24c3af9a99d1ac0cd81d7a18a8bdeef294fcbc60330f592e2711f4378dbaecaa021838
-
SSDEEP
1536:mzPV6I+GsUfFOiU6hEpGAdyxkRl+TVQN7T3nJavYFe7prykNLzclV:mrtOAh/AdyKmV+JaVMWLYlV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfec3ad100bf31b7a348c61bc708f6ba_JaffaCakes118
Files
-
dfec3ad100bf31b7a348c61bc708f6ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
921e1673878a185c54fc4c0b37f5a201
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
FreeLibrary
OpenProcess
GetProcAddress
LoadLibraryA
Sleep
SetEnvironmentVariableA
CompareStringW
WideCharToMultiByte
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
GetCPInfo
HeapFree
HeapAlloc
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
SetUnhandledExceptionFilter
GetFileAttributesA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
VirtualProtect
GetSystemInfo
VirtualQuery
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
InterlockedExchange
GetACP
GetOEMCP
GetLocaleInfoW
SetStdHandle
ReadFile
CompareStringA
user32
MessageBoxA
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ