Static task
static1
Behavioral task
behavioral1
Sample
e9cef93e934d7b8454bdea3f1836d7d5_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e9cef93e934d7b8454bdea3f1836d7d5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9cef93e934d7b8454bdea3f1836d7d5_JaffaCakes118
-
Size
122KB
-
MD5
e9cef93e934d7b8454bdea3f1836d7d5
-
SHA1
1af778c213eb08174c396b9d5b4a0a7a8fbfb96d
-
SHA256
845325a0bbae598a8f4c84186aabf643195d4ade687008d4ecd958596f15537f
-
SHA512
719c491e8e53778a6cc6e638856590db5d3a10ce137c900ebcb85a1e1508d05afcd3f7360314f7c35b1f00f99e93d7c94b912137ca6f7ae0b536a4ba50660467
-
SSDEEP
3072:VTEDjzg5Gd0djB0bl+z+x4IuZ8/RHjH1L2:S/05Gdnblcm/RRy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9cef93e934d7b8454bdea3f1836d7d5_JaffaCakes118
Files
-
e9cef93e934d7b8454bdea3f1836d7d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d84bc3039446384d1c866bc36e92005
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
CloseHandle
CreateDirectoryA
SetFilePointer
GetModuleHandleA
GetSystemInfo
GetTimeFormatW
TerminateThread
GetCurrentThreadId
CreateMailslotW
GetFileType
SetUnhandledExceptionFilter
GlobalReAlloc
LoadLibraryW
GetProcAddress
FindNextFileW
lstrcatA
CreateProcessA
ExitProcess
GetWindowsDirectoryW
CreateDirectoryW
GlobalAlloc
WriteConsoleW
HeapFree
GetCurrentThread
LoadLibraryA
QueryPerformanceCounter
GetLastError
tapi32
lineOpenW
lineSetupConference
lineAddToConference
lineDevSpecificFeature
msvcrt
memcpy
wcsncpy
strncpy
_iob
isgraph
__p__commode
isleadbyte
isprint
_wcsnicmp
towupper
_vsnprintf
_wtoi
wcsncmp
__wgetmainargs
memset
atoi
_acmdln
user32
RegisterMessagePumpHook
DispatchMessageA
MsgWaitForMultipleObjects
GetWindowPlacement
SetScrollPos
ShowWindow
RealChildWindowFromPoint
DialogBoxParamW
OpenClipboard
LoadMenuW
LoadCursorW
RemoveMenu
DeleteMenu
SystemParametersInfoW
InvalidateRect
PostQuitMessage
GetAsyncKeyState
LoadAcceleratorsW
GetKeyState
LoadStringW
SetCapture
ReleaseDC
GetMenuItemCount
GetDlgItem
gdi32
SetTextColor
SelectPalette
CreatePen
SetMapMode
PatBlt
CreateSolidBrush
CreateFontIndirectA
SetPixel
BitBlt
SetBkColor
DeleteDC
GetDeviceCaps
SelectObject
SaveDC
CreateCompatibleDC
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
barg Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ