Static task
static1
Behavioral task
behavioral1
Sample
25c31c10c2d67116d9315fb19d1d2939_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25c31c10c2d67116d9315fb19d1d2939_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25c31c10c2d67116d9315fb19d1d2939_JaffaCakes118
-
Size
146KB
-
MD5
25c31c10c2d67116d9315fb19d1d2939
-
SHA1
6f70ee3ddbfa6bbe03797cd384e52c30829526b4
-
SHA256
ae24463bff8a647b81fbba10817db07270f25f0cf70fee87e1a4149bbce71f2c
-
SHA512
b9560c4345dd744db6b34b5c6bcb90b78c490cf8e8345dc6abda5c9ebf5e5da44bb1992df578407b5a1b50ecb637909dab89305a40cc4fa6c4d76e932a5aade2
-
SSDEEP
3072:xBNP1SXP4rmTrq9zxI63onk18wjclr0PG9gICZMjMwTvd81/7oIpKw:p0ArJNxI63oU8wjU0bI5r13MF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c31c10c2d67116d9315fb19d1d2939_JaffaCakes118
Files
-
25c31c10c2d67116d9315fb19d1d2939_JaffaCakes118.exe windows:4 windows x86 arch:x86
216943045871e4883382068305c900be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFileMappingA
GetStringTypeW
DnsHostnameToComputerNameW
SearchPathW
lstrcatA
GetModuleHandleA
GetCurrentProcessId
ReadFileScatter
GetCPInfoExW
LockFileEx
FreeUserPhysicalPages
GetStartupInfoA
msvcrt
_except_handler3
_acmdln
_adjust_fdiv
exit
__p__commode
__setusermatherr
_controlfp
_XcptFilter
_exit
__getmainargs
__p__fmode
_initterm
__set_app_type
user32
EnumPropsExA
AdjustWindowRect
DragDetect
PostThreadMessageW
GetTabbedTextExtentW
GetWindowModuleFileNameA
DdeSetUserHandle
OemToCharA
IsCharAlphaW
InsertMenuItemW
ValidateRgn
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ