Static task
static1
Behavioral task
behavioral1
Sample
54d1711f5b4ef6950294b03091f4183e_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
54d1711f5b4ef6950294b03091f4183e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54d1711f5b4ef6950294b03091f4183e_JaffaCakes118
-
Size
129KB
-
MD5
54d1711f5b4ef6950294b03091f4183e
-
SHA1
f09eb6339678e81fb6304d7e55b8a6eb939ea71a
-
SHA256
d246555591710b9906f6c8aec1291fe76ff8eb1758f0498822a64fb443ba2bd3
-
SHA512
3c6f96626414bcb2ffb087830151ecc9ccded506174feb4fd1bda313b3891a66bb93e3967e94f6aa3778f91b0f80c748bf690a36467a56687c204ba47b3b7dec
-
SSDEEP
3072:kzjxVGL4mVaclaspmSxh4SeZGjs4mYDqzS5D7lT4b54oN6Z6rAGmZ7E:kzeL4mYssSx/ekeSZG4tcR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54d1711f5b4ef6950294b03091f4183e_JaffaCakes118
Files
-
54d1711f5b4ef6950294b03091f4183e_JaffaCakes118.exe windows:6 windows x86 arch:x86
a3ee30cb1612c61484f41b7aacc4b2d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
MultiByteToWideChar
LocalAlloc
GetCommandLineW
GetACP
SetUnhandledExceptionFilter
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleHandleW
GetCommandLineW
LocalAlloc
Sleep
GetTickCount
GetCurrentProcess
GetModuleHandleA
GetTickCount
WaitForSingleObject
FindResourceA
GetACP
LocalFree
GetTickCount
GetModuleHandleA
GetProcessHeap
GetCommandLineW
SetEvent
SetUnhandledExceptionFilter
GetCurrentThreadId
user32
EndPaint
IsDlgButtonChecked
MoveWindow
MoveWindow
BeginPaint
GetMenu
GetMessageW
CheckDlgButton
GetMenu
MoveWindow
SendDlgItemMessageW
BeginPaint
GetMenu
GetSysColor
GetMenu
CheckDlgButton
PostMessageW
MoveWindow
GetCursorPos
LoadAcceleratorsW
GetSysColor
LoadAcceleratorsW
GetDlgCtrlID
SendDlgItemMessageW
GetSysColor
LoadAcceleratorsW
IsDlgButtonChecked
GetSystemMenu
GetSystemMenu
BeginPaint
SetWindowPos
ntdll
NtAllocateVirtualMemory
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WiDYXQ Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ