Static task
static1
Behavioral task
behavioral1
Sample
269d2144e93b4a40baf60f42a4d75f60_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
269d2144e93b4a40baf60f42a4d75f60_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
269d2144e93b4a40baf60f42a4d75f60_JaffaCakes118
-
Size
192KB
-
MD5
269d2144e93b4a40baf60f42a4d75f60
-
SHA1
057ae9f9f673f665e08398848281e6c076c1ca62
-
SHA256
fbdd17c74d38a0eb7c40528f8e91fe7151d24e0466af6a59112f66bf8495d736
-
SHA512
5d46501ffe56d0165b4f555f9b524af7d39d468db5f8bbedff9063dfb715bd6121d93edb66b14a5bcd1e656eb1fad568f06c353592c9c311c8ee4909ad495a9e
-
SSDEEP
3072:sXa6LcjOMEBodXG52YNB6G/6eE7hfoXdbveY72cqKCvFulfmJfn4xJmMiOioMoC:sX5dvB7gYNB606eEedDeFupoKoMaoK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 269d2144e93b4a40baf60f42a4d75f60_JaffaCakes118
Files
-
269d2144e93b4a40baf60f42a4d75f60_JaffaCakes118.exe windows:4 windows x86 arch:x86
52a1904affd9d847f31c84e381001bd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
RtlUnwind
GetProcAddress
SetHandleCount
GetEnvironmentStringsW
LoadLibraryA
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW
ReadFile
GetModuleHandleA
GetFileType
LocalHandle
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
user32
CreateMenu
GetClipCursor
OemToCharBuffW
UnhookWinEvent
GetDlgItemTextW
UnpackDDElParam
SetWindowPlacement
CheckRadioButton
ExcludeUpdateRgn
LoadMenuIndirectA
DestroyAcceleratorTable
DialogBoxParamW
LoadCursorA
gdi32
SetBitmapDimensionEx
GetEnhMetaFileW
CreateSolidBrush
SwapBuffers
GdiComment
CreateEnhMetaFileA
GetTextCharacterExtra
IntersectClipRect
GetTextCharset
CreateEllipticRgn
CreateBitmapIndirect
RoundRect
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE