Static task
static1
Behavioral task
behavioral1
Sample
e06a7ae870e885c3288fa1442fea3652_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e06a7ae870e885c3288fa1442fea3652_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e06a7ae870e885c3288fa1442fea3652_JaffaCakes118
-
Size
12.5MB
-
MD5
e06a7ae870e885c3288fa1442fea3652
-
SHA1
3783d3089fdcf01a954ca14fa36560454b1629e7
-
SHA256
f5c8d6a91b87bd0ac457d87465ceedd153c982e5e66ab07a27ca095edb7ccd53
-
SHA512
969545c01330e857ee3e0804bfa3a3e7b75eda70674eccab521a2cf88db770ab69c1d806d6b293628b245fc9b0e5ada2298f05a32d94d6fb2ca51efb5580479c
-
SSDEEP
1536:BVZK1I9rn2BHELrWh9iuDdJm7CyY8rhGDNDxTWNdUhUFIq:tK1Mn2BHsrt4mYnrMdUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06a7ae870e885c3288fa1442fea3652_JaffaCakes118
Files
-
e06a7ae870e885c3288fa1442fea3652_JaffaCakes118.exe windows:5 windows x86 arch:x86
eea35c08b4b314e861faff49bf279746
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
DispatchMessageW
IsDialogMessageW
DrawStateA
GetMessageW
LoadIconA
DialogBoxParamA
PostMessageW
PeekMessageA
LoadBitmapW
IsCharLowerW
GetClassLongA
LoadCursorA
dsprop
CheckADsError
ErrMsg
advapi32
OpenServiceA
RegSaveKeyA
InitializeAcl
RegLoadKeyW
RegOpenKeyA
RegDeleteValueW
CryptSignHashW
RegRestoreKeyW
RegEnumKeyW
RegCloseKey
GetUserNameA
RegUnLoadKeyA
RegCreateKeyExW
authz
AuthzFreeAuditEvent
AuthzAddSidsToContext
esent
JetBeginTransaction
JetCloseTable
JetCloseDatabase
shell32
DragAcceptFiles
ShellAboutA
SHGetFolderPathW
SHGetDataFromIDListW
ShellExecuteA
FindExecutableW
SHGetMalloc
ExtractIconA
SHGetFileInfoA
DragFinish
DllGetClassObject
ShellExecuteA
DragQueryFileW
ShellMessageBoxW
SHDefExtractIconA
StrChrW
StrStrW
cryptdll
CDLocateRng
MD5Update
MD5Init
CDBuildVect
MD5Final
shlwapi
UrlCanonicalizeA
UrlUnescapeA
PathIsRootW
UrlGetLocationA
PathCommonPrefixA
PathCombineA
UrlHashA
UrlCompareA
UrlIsA
UrlCreateFromPathA
UrlEscapeW
kernel32
ExitProcess
InterlockedIncrement
GetDateFormatW
OpenJobObjectA
GetModuleHandleA
FindFirstFileA
LoadLibraryA
SleepEx
GetLongPathNameA
GetLastError
MoveFileExA
GetWindowsDirectoryA
GetShortPathNameW
SetLocalTime
VirtualAlloc
CreateMutexA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.ipa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
.wat Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.4MB - Virtual size: 1KB
IMAGE_SCN_MEM_READ