Static task
static1
Behavioral task
behavioral1
Sample
e808f519206eedd5c9b90c6572523528_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e808f519206eedd5c9b90c6572523528_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e808f519206eedd5c9b90c6572523528_JaffaCakes118
-
Size
50KB
-
MD5
e808f519206eedd5c9b90c6572523528
-
SHA1
1c4aefaa9f01d3a9c99ad3baea2f8b45577434e2
-
SHA256
957a079441b9d22ac5c76ae255271fd756ccb68e53967327b5ed640939da3343
-
SHA512
c0789048705b97cde97aad671ede44b2ce3dd93c0547f534f892c0c8cb7416349bd59a2269ddeeb4777b15873db1fc7267ae30ae2e30972673a7fba4abd7ada0
-
SSDEEP
1536:Q4qnQh+vR3yUmzfiLnVql5mD/3+HBxjfY:QNRyzziLnVq5a+e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e808f519206eedd5c9b90c6572523528_JaffaCakes118
Files
-
e808f519206eedd5c9b90c6572523528_JaffaCakes118.exe windows:5 windows x86 arch:x86
715ba58e27e59b5ebc605e8ee1988eac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
shlwapi
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CloseDesktop
DispatchMessageA
DrawIcon
GetDlgItemTextA
GetIconInfo
GetWindowLongA
GetWindowThreadProcessId
OpenDesktopA
PeekMessageA
SetProcessWindowStation
Sections
.xcrmt Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.evknyf Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nkjoj Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ