Static task
static1
Behavioral task
behavioral1
Sample
dd9c937a7517f585cd30cbc9a1f71353_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
dd9c937a7517f585cd30cbc9a1f71353_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
dd9c937a7517f585cd30cbc9a1f71353_JaffaCakes118
-
Size
148KB
-
MD5
dd9c937a7517f585cd30cbc9a1f71353
-
SHA1
af791e866175d5296e9c279d5017e61e04875127
-
SHA256
9e7ab14320c8a3294183cc1ea9f4b509fe720c288df38f46ad6df347b301d54a
-
SHA512
8886dafb20c8e506b27170b84bb55056d23fc2440e1b4b4fa6b4d716a02b0848b3264a8352243b1632f0c04aee529271ee596d074a84b1000fdf9046ef756c4e
-
SSDEEP
3072:kk3DFYffefdlkuHK9b/n+AnF2GWI8mb+y8s3iS:kcDgsnlql/+gWi8v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd9c937a7517f585cd30cbc9a1f71353_JaffaCakes118
Files
-
dd9c937a7517f585cd30cbc9a1f71353_JaffaCakes118.exe windows:4 windows x86 arch:x86
488bcfdddf099abac24277f4e61b2acb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetDiskFreeSpaceA
WaitForSingleObject
FreeLibrary
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
WriteFile
ReadConsoleInputA
GetCurrentThread
GetCurrentDirectoryW
CreateFileW
GetFullPathNameA
SetFileAttributesW
Beep
FindFirstFileA
GetSystemDefaultLCID
SetFilePointer
SetConsoleMode
SetCurrentDirectoryA
IsValidCodePage
SetEnvironmentVariableA
GetLogicalDrives
GetNumberOfConsoleInputEvents
ResumeThread
GetEnvironmentStrings
DeleteFileA
RaiseException
FlushFileBuffers
GetUserDefaultLCID
IsBadCodePtr
RemoveDirectoryW
TlsSetValue
TlsGetValue
FindNextFileA
GetModuleFileNameA
ReadConsoleA
GetLastError
QueryPerformanceCounter
GetFileAttributesA
GetModuleHandleA
GetConsoleMode
GetStartupInfoA
GetTimeZoneInformation
DeleteCriticalSection
GetCurrentProcess
CloseHandle
SetEndOfFile
ReadFile
UnlockFile
GetProcAddress
SetLocalTime
GetVersion
GetFullPathNameW
CreateThread
LocalFileTimeToFileTime
GetFileInformationByHandle
GetStdHandle
GetCPInfo
GetLocalTime
LoadLibraryW
FileTimeToSystemTime
WriteConsoleA
GetACP
FindClose
GetExitCodeProcess
GetCurrentDirectoryA
VirtualFree
SetConsoleCtrlHandler
SetCurrentDirectoryW
FileTimeToLocalFileTime
GetDriveTypeW
GetModuleFileNameW
MultiByteToWideChar
SystemTimeToFileTime
GetDriveTypeA
DuplicateHandle
RtlUnwind
CreateDirectoryW
GetCommandLineA
FindNextFileW
SetFileAttributesA
GetFileType
IsBadWritePtr
LockFile
SetStdHandle
CreatePipe
RemoveDirectoryA
SetEnvironmentVariableW
SetFileTime
SetUnhandledExceptionFilter
LeaveCriticalSection
CreateFileA
GetFileAttributesW
PeekConsoleInputA
GetSystemDefaultLangID
TlsAlloc
user32
MessageBoxA
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ