Static task
static1
Behavioral task
behavioral1
Sample
dff3ba281acbeadf6d717f6ef517c20e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dff3ba281acbeadf6d717f6ef517c20e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dff3ba281acbeadf6d717f6ef517c20e_JaffaCakes118
-
Size
84KB
-
MD5
dff3ba281acbeadf6d717f6ef517c20e
-
SHA1
16d4e467708e1fd9bd6c0552fb01364b2b19c54d
-
SHA256
e06f19db5bd48ec840f115bd10e6d42e331027250b1dd6f66eb6b1daa2c390db
-
SHA512
479ceb925074d6794a369ee4c0f4346a1b73b118cf1adfe824178a06f613ae102bf5b260e01909c391971e0b51c46f314d9d9996be24f018ddb688c48130747c
-
SSDEEP
1536:QVhpgLoZ7r4YM5agsCTzbIndASxBJAAL3LPQPb2Cat+5qP38Eo0D:vL87r4ePCTzEdAcLL7oz2pm638Eo0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dff3ba281acbeadf6d717f6ef517c20e_JaffaCakes118
Files
-
dff3ba281acbeadf6d717f6ef517c20e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4062fc2b9c933b63ce340be42237a5a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetVersion
LockResource
TlsSetValue
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCurrentThreadId
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
DeviceIoControl
FindResourceW
LoadResource
GetCPInfo
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetStringTypeW
user32
EndPaint
BeginPaint
DestroyWindow
GetClientRect
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
LoadIconW
RegisterClassExA
DrawTextA
GetSystemMetrics
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
DialogBoxParamW
GetDC
GetSysColor
GetSysColorBrush
wsprintfA
FindWindowA
MessageBoxA
gdi32
CreateBitmap
Rectangle
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ole32
CoTaskMemAlloc
CoInitialize
CoUninitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODE Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ