Static task
static1
Behavioral task
behavioral1
Sample
f6be1b6f925a99196daabfe877c2a3e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f6be1b6f925a99196daabfe877c2a3e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6be1b6f925a99196daabfe877c2a3e1_JaffaCakes118
-
Size
13KB
-
MD5
f6be1b6f925a99196daabfe877c2a3e1
-
SHA1
c8a64c565576eea9d3f5a4f04f61e77a49b4e115
-
SHA256
37ef933d9bb7420e4626804466e6cddd12ba1e4c7f9886564de9389ae8e6fcbc
-
SHA512
9b43be4308a3c7aa4d31e64bd1054d61d7ca1c3d938a4fcbd618cd60937a22c0a127cedd2233e6491ab2482463e151bbce82d87842a365044fed666bc1ae241c
-
SSDEEP
384:YDS0CPm2uqA44ntUv3WHQr4J3ihecoV46ELA:6t9yQIecT6ELA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6be1b6f925a99196daabfe877c2a3e1_JaffaCakes118
Files
-
f6be1b6f925a99196daabfe877c2a3e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
0767c08ec9a487c453def24ebeef8fa3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgSetTimes
StringFromGUID2
CoCreateInstance
kernel32
VirtualFree
VirtualProtect
GlobalLock
TlsAlloc
GetCurrentProcess
FreeLibrary
InitializeCriticalSection
LoadLibraryA
GetTickCount
OutputDebugStringW
IsDebuggerPresent
LoadLibraryW
InterlockedIncrement
GetOEMCP
ExitProcess
GlobalMemoryStatus
SetConsoleCP
TerminateProcess
HeapAlloc
GetLastError
MoveFileA
GetStartupInfoA
lstrlenW
QueryPerformanceCounter
GetCurrentThread
GetCurrentProcessId
GetModuleHandleA
UnmapViewOfFile
GetCommandLineA
UnhandledExceptionFilter
GetTempPathA
GetVersionExA
TlsFree
SetStdHandle
GetACP
user32
TranslateMessage
EnableMenuItem
GetParent
RedrawWindow
GetMessageA
CreateWindowExA
ReleaseDC
CallWindowProcA
msvcrt
_controlfp
_purecall
_vsnwprintf
??0exception@@QAE@XZ
advapi32
RegQueryValueExW
RegOpenKeyW
OpenServiceW
RegOpenKeyExW
RevertToSelf
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE