Static task
static1
Behavioral task
behavioral1
Sample
dfecfa3e88b9541384a5d919dcb3d539_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
dfecfa3e88b9541384a5d919dcb3d539_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
dfecfa3e88b9541384a5d919dcb3d539_JaffaCakes118
-
Size
60KB
-
MD5
dfecfa3e88b9541384a5d919dcb3d539
-
SHA1
5106d3862b3f7e8df6add88b719747f124baa371
-
SHA256
6993988e14278f36ad05eec9a453e78c94260eb910adaa200cba43fcfcfc0e32
-
SHA512
8c5b121622d2ead554bcebd67e64c4b586038293ccaab77e7fd4c6011675f88973cb39d992a43ab64f0b2e3d2c0f25d7e556f3d654c010b116bc6e85b1f26006
-
SSDEEP
768:DM10KgECyVWFXlk87QK7LPjMvl/SSd6bZUTbaAvh03/sKDz/BdPR4q:Dk0REVilkkQK/r6UWTba5BdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfecfa3e88b9541384a5d919dcb3d539_JaffaCakes118
Files
-
dfecfa3e88b9541384a5d919dcb3d539_JaffaCakes118.exe windows:4 windows x86 arch:x86
340aca47938017b87641e37181b4f456
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatA
QueryPerformanceCounter
SetMailslotInfo
HeapAlloc
GetEnvironmentVariableA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW
user32
GetQueueStatus
ole32
CoInitialize
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ