Static task
static1
Behavioral task
behavioral1
Sample
6dfbac33aaa9d259d9b1d5de7a5e8a04_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6dfbac33aaa9d259d9b1d5de7a5e8a04_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
6dfbac33aaa9d259d9b1d5de7a5e8a04_JaffaCakes118
-
Size
279KB
-
MD5
6dfbac33aaa9d259d9b1d5de7a5e8a04
-
SHA1
c62a3d873dbfc18748ed83e67cbd0c652d47bf0c
-
SHA256
a56eca2e55fcf8226e91aea994ba7e1caf081df98ef5b3112c389276dd50c91c
-
SHA512
bdb8ed0d1ae56a59b9ab72130a5ce314e72a37efc0bedce9aa2b4bc7205460fa160bcc97e530827c8650aed974e929382983c3019180504bde9ac278d9be6a12
-
SSDEEP
6144:QxC5jyHwrtrrnoPsSDo8D7WyGKuVI51XyQPqbL+w/IKjFawA:FjyHwrtoPD8SqKuVaChz3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dfbac33aaa9d259d9b1d5de7a5e8a04_JaffaCakes118
Files
-
6dfbac33aaa9d259d9b1d5de7a5e8a04_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ff84ae31af0b7225a51907351f3006b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LockFile
LoadLibraryW
GetACP
AddAtomA
WinExec
SearchPathW
MoveFileW
FindClose
GetCurrentDirectoryW
DeleteFileW
GetModuleHandleA
GlobalSize
WriteFile
GetModuleFileNameW
IsDBCSLeadByte
SetLastError
ReadFile
GetModuleHandleW
GlobalReAlloc
GlobalAlloc
IsDBCSLeadByteEx
UnlockFile
EnumResourceNamesW
GetDriveTypeW
GetVolumeInformationW
GlobalFree
SetFileTime
FindActCtxSectionStringW
GetSystemDefaultLCID
SetFilePointer
FindNextFileW
lstrlenW
GetVersionExW
CloseHandle
GetFileAttributesW
GetFileSize
GlobalUnlock
OutputDebugStringA
GetFileTime
FindFirstFileW
SetFileAttributesW
GetVersion
GetLastError
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 145KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ