Static task
static1
Behavioral task
behavioral1
Sample
e9d550c5a712006a27dd315fa35c0e9d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9d550c5a712006a27dd315fa35c0e9d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9d550c5a712006a27dd315fa35c0e9d_JaffaCakes118
-
Size
17KB
-
MD5
e9d550c5a712006a27dd315fa35c0e9d
-
SHA1
df615a64df30447d3d23d70a61b94fa560cf7815
-
SHA256
523e4816a3e7e5eb52fe695d816fe7025b887739a65d3ad578a1e45b81dd4c6c
-
SHA512
2523441e6dc19e5af37260885739e738e24ebcf78dd998f4c88841ead6ca29c5a97137de0bb896c44ff0e5a1ff58991680ecde0f0a0207ed2e0316df223219c3
-
SSDEEP
192:63TCKjMBonocMzQZUN63XinAiTyekPxGzDzSF5iMudcW77r75i1XX1:iCKABRcMz4xHcTydcN/dcolc1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9d550c5a712006a27dd315fa35c0e9d_JaffaCakes118
Files
-
e9d550c5a712006a27dd315fa35c0e9d_JaffaCakes118.exe windows:4 windows x86 arch:x86
073c01105c58148c57509b44edc1ef65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetAtomNameA
GetCommandLineA
GlobalUnlock
GetStdHandle
LoadLibraryExA
CloseHandle
GetModuleHandleA
GetTickCount
SetConsoleCP
GetConsoleCP
GetSystemDefaultLangID
lstrlenA
HeapCreate
WaitForSingleObject
WaitForMultipleObjects
GetVersion
CompareFileTime
VirtualProtect
InterlockedExchange
HeapReAlloc
user32
SetWindowPos
DialogBoxParamA
DragObject
CreateMenu
FillRect
CreateCursor
FindWindowA
SetPropA
InvertRect
DrawCaption
GetDlgItem
GetCursorInfo
GetKeyboardLayout
SetScrollInfo
EnableScrollBar
CreateIcon
DestroyMenu
CopyImage
IsDialogMessage
GetKeyState
InsertMenuA
DispatchMessageA
advapi32
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ