Static task
static1
Behavioral task
behavioral1
Sample
ffccd29e4ae2965263077aad25c01c4b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ffccd29e4ae2965263077aad25c01c4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffccd29e4ae2965263077aad25c01c4b_JaffaCakes118
-
Size
26.2MB
-
MD5
ffccd29e4ae2965263077aad25c01c4b
-
SHA1
5308144330f692fe96d12a54421ed7c1adabfbdc
-
SHA256
abd44fa1d9fb9d2c1f07cf64cac63c108dbc6920d662b1855e7233b02bd66f9f
-
SHA512
14c98c4a36784e7b972734687f5decd905a50edc5609cab0a21ca262a586716c73521043cd8ba3555388c1461c6ee2febf8282bd962653b600b65b5f0fcc2641
-
SSDEEP
786432:V+YWUlpX3QoagSN1zIwlnineNMRS+VuUsgullpYLU82:V+YgTgKMRTV1KYLUB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffccd29e4ae2965263077aad25c01c4b_JaffaCakes118
Files
-
ffccd29e4ae2965263077aad25c01c4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
68b403f689fde9a0f2cd2f7dd45eef2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZInit
LZCopy
LZClose
comctl32
ord17
kernel32
HeapAlloc
GetProcessHeap
GlobalFree
lstrcpyA
lstrlenA
ResumeThread
SetThreadContext
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
GetThreadContext
lstrcpynA
GetModuleFileNameA
DuplicateHandle
RemoveDirectoryA
ExitProcess
Sleep
GetCurrentProcess
CloseHandle
DeleteFileA
WaitForSingleObject
CreateProcessA
CreateFileA
GetTempFileNameA
GetTempPathA
MoveFileA
GetCommandLineA
GlobalUnlock
WriteFile
ReadFile
SetFilePointer
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
SetErrorMode
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
user32
wsprintfA
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ