Static task
static1
Behavioral task
behavioral1
Sample
36dcea7ec14accc2e1c92ee6facdaf4f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36dcea7ec14accc2e1c92ee6facdaf4f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36dcea7ec14accc2e1c92ee6facdaf4f_JaffaCakes118
-
Size
115KB
-
MD5
36dcea7ec14accc2e1c92ee6facdaf4f
-
SHA1
c8893a00fa6d9b3a8dde87ca34822b26a687d917
-
SHA256
e45488c3381f81883826c146ef4f9e44f2882872319a62f086353376a9b5067d
-
SHA512
601930de66ac493443cbb469ec95ae68303f636de8d368020a11ef16e4e87ab8158011279ae3393eedc867dddd1ec801a1d2cb19d27568db667a20b380828986
-
SSDEEP
3072:5z4PmnlNe8jrm7OHDUvNk0m1PxvacaSOtbwL:5vn1iOjkkf1pCcahtbw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36dcea7ec14accc2e1c92ee6facdaf4f_JaffaCakes118
Files
-
36dcea7ec14accc2e1c92ee6facdaf4f_JaffaCakes118.exe windows:5 windows x86 arch:x86
1b0c41d624198f620385cacba9217721
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
VirtualAlloc
CreateSemaphoreA
GetCommandLineA
GetEnvironmentStringsW
GetTickCount
GetModuleHandleW
GetModuleHandleA
GetCommandLineW
CreateMutexA
GetCurrentThread
GetEnvironmentStrings
GetVersionExA
GetPriorityClass
CreateEventA
GetStartupInfoW
user32
LoadCursorA
IsWindow
AnyPopup
SetWindowTextA
GetForegroundWindow
IsChild
GetParent
LoadIconA
GetWindowDC
IsIconic
LoadCursorFromFileA
AnimateWindow
OpenIcon
CloseWindow
GetDesktopWindow
gdi32
AbortDoc
GetTextMetricsA
GetTextColor
SetTextAlign
GetRasterizerCaps
crypt32
CryptMsgUpdate
setupapi
SetupGetLineCountW
msvcrt
strlen
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_except_handler3
_onexit
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ