Static task
static1
Behavioral task
behavioral1
Sample
e7698ea27b83ec9e80f37856651c4575_JaffaCakes118.exe
Resource
win7-20240319-en
General
-
Target
e7698ea27b83ec9e80f37856651c4575_JaffaCakes118
-
Size
144KB
-
MD5
e7698ea27b83ec9e80f37856651c4575
-
SHA1
81190256efded02c2774eea89e9911e5d8e9b007
-
SHA256
49e8d9a7e68065ad283f3cd1e30e65774a4e63a568afb771da3ee28eb1961bec
-
SHA512
0ba0f54a101f8079c21b9c69509296978b981f5f7f28cdabe5edc173229c9dfcc12bbccd45fc7ef96593421c0cf91c8907bd3acce1d0334db4ef02cf917a6218
-
SSDEEP
1536:93dYNoaDiHdlJbpgIru/TVgczP8qG8pW8NOrw8/diK6/Z7zivn9p4nUxBmS/Kx/v:93dQLqRzu/TDP6MW8Nx8QAf9o8MFx/vH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7698ea27b83ec9e80f37856651c4575_JaffaCakes118
Files
-
e7698ea27b83ec9e80f37856651c4575_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7efdd0f2f8a2c7376dcc6f04ae9098e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ChangeDisplaySettingsA
MessageBoxA
ShowWindow
GetKeyNameTextA
advapi32
OpenProcessToken
OpenServiceA
OpenSCManagerA
LookupPrivilegeValueA
GetUserNameA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
kernel32
_llseek
VirtualUnlock
_lcreat
WinExec
lstrcatA
GlobalLock
LocalFileTimeToFileTime
GetConsoleMode
GlobalUnlock
CreateDirectoryA
DosDateTimeToFileTime
IsValidLocale
_lwrite
DosDateTimeToFileTime
GetUserDefaultUILanguage
CreateDirectoryA
GetCurrentDirectoryA
lstrcmpW
SetFileTime
GlobalAlloc
ExitProcess
SetCurrentDirectoryA
OpenMutexW
GetDriveTypeA
_lread
SetConsolePalette
SleepEx
FindFirstFileA
CreateDirectoryExA
GetTimeZoneInformation
lstrcpyA
GetModuleHandleW
GlobalHandle
QueryPerformanceFrequency
TlsSetValue
SetFileAttributesW
FindClose
_lopen
SetConsoleCursorInfo
GetVolumeInformationA
lstrlenA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE