Static task
static1
Behavioral task
behavioral1
Sample
dcfab1844d8110d6fc87c84df363df28_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
dcfab1844d8110d6fc87c84df363df28_JaffaCakes118
-
Size
292KB
-
MD5
dcfab1844d8110d6fc87c84df363df28
-
SHA1
7ead7f81aaf53861013ee18b721bfb65c7c72243
-
SHA256
244fd237fd1df6b7a85b5b0a0c91f6ea5f550b0b059053d13a8f71ff550fcf1b
-
SHA512
e61cff6d7da4ecba732bcb6c919be4a7cbaa2f36edbdde90b0bbaabee630e39590188183a90b5bc6b8965db96649e8bfc484159a3f5453ebfb8c697734c83aeb
-
SSDEEP
6144:tMi9J0aPyRa2B9UX4Wt8f32Qhzeu2Vz1y8MYYHWBT7mD:BqMft8f32QhzeLzhMY97m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcfab1844d8110d6fc87c84df363df28_JaffaCakes118
Files
-
dcfab1844d8110d6fc87c84df363df28_JaffaCakes118.exe windows:4 windows x86 arch:x86
58b01414778ffada8c3686158235545f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
MultiByteToWideChar
GetAtomNameW
TlsGetValue
GetTimeFormatA
GetCPInfo
RtlUnwind
SetStdHandle
SetFilePointer
GetOEMCP
GetACP
GetConsoleOutputCP
TlsSetValue
EnumResourceNamesA
HeapSize
HeapReAlloc
FindResourceA
GetLocaleInfoA
TlsAlloc
IsValidCodePage
VirtualAlloc
WriteConsoleA
RaiseException
shell32
SHGetDataFromIDListW
ShellExecuteW
SHGetPathFromIDListW
SHGetFileInfoW
SHAppBarMessage
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetMalloc
SHGetDesktopFolder
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW
occache
FindControlClose
Sections
.text Size: 135KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ