Static task
static1
Behavioral task
behavioral1
Sample
da27bcd4562e3294c1e645534cbe042f_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
da27bcd4562e3294c1e645534cbe042f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
da27bcd4562e3294c1e645534cbe042f_JaffaCakes118
-
Size
168KB
-
MD5
da27bcd4562e3294c1e645534cbe042f
-
SHA1
bbd1f875772739ace1241d03eafe63b71222b6c2
-
SHA256
29fd5e422fb5233fa538214586b8b790823af18489d86b5db50d17ea8ebdb317
-
SHA512
8430362fe6be7eb17c607891c60523add034ea5bf02b6bb2cf47b281284c8bf94e3fc40dae6228eeec00b286abe4dfeb4bb3bef3fa332dafecb225e9cc57eae3
-
SSDEEP
3072:S5Wt/iXE2F7S0nmJqPTsEof4R88yz7FzxTiiisHs2fKnqIBYaFIDe3i:SUt/uPdqJqPYEc4WD7FzEbYaFIDeS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da27bcd4562e3294c1e645534cbe042f_JaffaCakes118
Files
-
da27bcd4562e3294c1e645534cbe042f_JaffaCakes118.exe windows:4 windows x86 arch:x86
38295ea7c0b3fa8c04fc26c354725ffb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
kernel32
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetStdHandle
GetCurrentProcess
GetVersion
InitializeCriticalSection
GetCPInfo
HeapAlloc
GetLastError
InterlockedExchange
GetStartupInfoW
HeapCreate
LoadResource
WriteConsoleW
VirtualFree
LCMapStringA
CreateSemaphoreW
WriteConsoleA
WriteConsoleInputVDMA
ExitProcess
DeleteFileW
GetVersionExA
CopyFileW
LoadLibraryExW
RtlUnwind
IsProcessorFeaturePresent
GetStdHandle
CreateProcessW
GetSystemTimeAsFileTime
LockResource
VirtualAlloc
CloseHandle
MulDiv
TlsSetValue
GetDriveTypeW
GetProcessHandleCount
GetEnvironmentStringsW
GetThreadLocale
lstrlenA
LCMapStringW
GetACP
GetConsoleMode
GetEnvironmentStrings
HeapFree
InterlockedCompareExchange
GetFileSize
LoadLibraryA
GetCommandLineW
LocalAlloc
GetStartupInfoA
FlushFileBuffers
GetOEMCP
GetStringTypeA
HeapReAlloc
FindResourceW
GetVersionExW
GetStringTypeW
CreateFileW
EnumResourceNamesA
WaitForSingleObject
SetLastError
GetConsoleCP
TlsAlloc
InterlockedIncrement
lstrcmpA
GetFileAttributesW
GetModuleHandleA
LoadLibraryW
lstrcmpiW
HeapDestroy
FreeLibrary
GetModuleHandleW
WriteFile
QueryPerformanceCounter
GetFileType
FlushInstructionCache
SizeofResource
GetProcAddress
ReadFile
GetModuleFileNameW
SetFilePointer
LocalFree
GetTickCount
FreeEnvironmentStringsW
InterlockedDecrement
GetModuleFileNameA
GetCurrentProcessId
LeaveCriticalSection
Sleep
WritePrivateProfileSectionW
GetCommandLineA
WideCharToMultiByte
TlsGetValue
GetCurrentThreadId
GetLocaleInfoA
TlsFree
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
SetHandleCount
CreateFileMappingW
DeleteCriticalSection
GetConsoleOutputCP
GetProcessHeap
CreateFileA
RaiseException
GetSystemDirectoryW
lstrlenW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
user32
GetParent
GetClassInfoExW
GetDC
CreateWindowExW
EndPaint
SystemParametersInfoW
RegisterClassExW
DestroyWindow
GetWindowTextLengthW
BeginPaint
GetWindow
GetDlgItemTextW
LoadCursorW
GetDlgItem
MessageBoxW
DispatchMessageW
GetClientRect
MapWindowPoints
SetWindowTextW
TranslateMessage
GetWindowInfo
SetCapture
GetWindowRect
PeekMessageW
SetDlgItemTextW
SetWindowPos
EndDialog
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ