Static task
static1
Behavioral task
behavioral1
Sample
17718ab447a0ff0ba6d6faa0e0c0d7e3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17718ab447a0ff0ba6d6faa0e0c0d7e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17718ab447a0ff0ba6d6faa0e0c0d7e3_JaffaCakes118
-
Size
69KB
-
MD5
17718ab447a0ff0ba6d6faa0e0c0d7e3
-
SHA1
43e7d734aee1aa34415d1974db57f882180a8810
-
SHA256
ade6fd08ddf654b7c5afa5434c9a2e916902055c44f152f500febc415eb240d1
-
SHA512
467169bbd813f369c4c9365c052e35354083d1f941aaa0e345dda1d846806e3757cabc3ecb992890c5652a3daacbcad3b600c83314e59257410103da3db76f7d
-
SSDEEP
1536:gW01i20zNFHywE2aDAS6xiIoMBFul5to1NeLZdKb4P:gfoHzrHywE2qAS+rsTtMCjKb4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17718ab447a0ff0ba6d6faa0e0c0d7e3_JaffaCakes118
Files
-
17718ab447a0ff0ba6d6faa0e0c0d7e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
b4197b82ca8b06ab4cca046158f917a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
FindVolumeClose
CancelIo
GetFileType
LocalSize
lstrlenA
GetFileAttributesA
WriteFile
GetCommandLineW
HeapFree
CloseHandle
GetModuleHandleA
GetFileTime
FindVolumeClose
EnterCriticalSection
GetCommandLineA
GetModuleFileNameA
IsBadReadPtr
SetFileAttributesW
GetCurrentDirectoryW
HeapCreate
WaitForMultipleObjects
GetDriveTypeA
FindClose
ExitThread
uxtheme
GetThemeColor
CloseThemeData
IsThemeActive
DrawThemeEdge
GetWindowTheme
CloseThemeData
GetThemeEnumValue
DrawThemeBackground
GetThemeTextMetrics
GetThemeBool
OpenThemeData
GetThemeTextExtent
SetWindowTheme
dmocx
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE