Static task
static1
Behavioral task
behavioral1
Sample
1292cfddb5a9d96a5147a0fe18900d9a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1292cfddb5a9d96a5147a0fe18900d9a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1292cfddb5a9d96a5147a0fe18900d9a_JaffaCakes118
-
Size
40KB
-
MD5
1292cfddb5a9d96a5147a0fe18900d9a
-
SHA1
df666bc4209548b876cf8f4ee026d823329fb65a
-
SHA256
addbbde8f952dbad58f62ee22c0f9d4794bfd572ca9456ca26c3dd74a7c0477e
-
SHA512
7b7dd7d0dd8a9ad4317b663c466119b66e7f96085ca8ace704e9f7b4db2508113111e4b6cb3a48b6cd330c463df22b7ac29408f70a79d076e7b9dcedcf11ac8d
-
SSDEEP
768:f7kBWIADq9PZXQ5OpHpwcENDmIK8BWd9:DkBLO5OpHpw7zK8BWd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1292cfddb5a9d96a5147a0fe18900d9a_JaffaCakes118
Files
-
1292cfddb5a9d96a5147a0fe18900d9a_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e8ec6596e481e851165e7943df52fe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetLastError
SetFilePointer
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
SetEndOfFile
LCMapStringA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetOEMCP
HeapReAlloc
GetCPInfo
CreateFileA
GetACP
FlushFileBuffers
SetStdHandle
CloseHandle
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStrings
ReadFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualFree
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
user32
EndDialog
DrawTextA
BeginPaint
GetClientRect
DestroyWindow
EndPaint
DefWindowProcA
CreateWindowExA
DialogBoxParamA
PostQuitMessage
UpdateWindow
SetTimer
ShowWindow
RegisterClassExA
LoadIconA
LoadCursorA
GetMessageA
LoadStringA
LoadAcceleratorsA
DispatchMessageA
TranslateAcceleratorA
TranslateMessage
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE