Static task
static1
Behavioral task
behavioral1
Sample
e8f7e89afaa990883a767c26c3dd202c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8f7e89afaa990883a767c26c3dd202c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8f7e89afaa990883a767c26c3dd202c_JaffaCakes118
-
Size
392KB
-
MD5
e8f7e89afaa990883a767c26c3dd202c
-
SHA1
aa175881ef307b551c30a78a8adc158f2deb2fbb
-
SHA256
6b3a588b86ec102e98cd14814dc7b008ec37f839984ac912abc0de884fb2a91f
-
SHA512
7e01a4ef391e4392bf7424c1c723565bd239377bb8aa8c673474541b4698209570a6a2eab4b17a284e2e9bb4d52c226588ad1762d68c67b8ec05843b232db24d
-
SSDEEP
6144:kcy70g2/ycos8Fk4NfVJ6fH92qsB9eoVnY80fej8TWVm:ktgd/Is8Fkk9J6f8r1Yfej8Tw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8f7e89afaa990883a767c26c3dd202c_JaffaCakes118
Files
-
e8f7e89afaa990883a767c26c3dd202c_JaffaCakes118.exe windows:4 windows x86 arch:x86
d30fc9bee29c0f4d8c0f8e5268796370
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
SetEvent
GetModuleHandleA
Sleep
GetTimeFormatA
SetLastError
CreateThread
CloseHandle
GetTickCount
UnmapViewOfFile
lstrlenA
GetCommandLineW
LocalUnlock
LocalFree
HeapCreate
GetCurrentDirectoryA
LoadLibraryExW
GetSystemTime
CreateFileA
GetComputerNameA
user32
SetFocus
GetKeyState
GetDC
DrawEdge
DispatchMessageA
GetComboBoxInfo
IsWindow
GetDlgItem
DrawMenuBar
CreateWindowExA
CallWindowProcA
CheckRadioButton
FillRect
cryptui
CryptUIDlgSelectStoreA
LocalEnroll
CryptUIDlgSelectCA
CryptUIDlgCertMgr
WizardFree
inetcpl.cpl
OpenFontsDialog
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ