Static task
static1
Behavioral task
behavioral1
Sample
cea20d9d2741dc5fc183ac450b2a0b90_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cea20d9d2741dc5fc183ac450b2a0b90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cea20d9d2741dc5fc183ac450b2a0b90_JaffaCakes118
-
Size
365KB
-
MD5
cea20d9d2741dc5fc183ac450b2a0b90
-
SHA1
e8db03d9eb840b2c0c653c0c9c4bd612c3b30711
-
SHA256
f2211ee6aef1efe135cc34265f7fe7a53516295a324d123e0a4a2ef006c45c10
-
SHA512
12cd8a8fe982a8ff74e23fac516c516cce30cf18dcb91f92706b325926af1fb11c2227a186b00bdcf6041f1da151df0c1a49e0be39ee1d0dc8096dd214ce2775
-
SSDEEP
6144:3aMRMEa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:BRMzx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cea20d9d2741dc5fc183ac450b2a0b90_JaffaCakes118
Files
-
cea20d9d2741dc5fc183ac450b2a0b90_JaffaCakes118.exe windows:4 windows x86 arch:x86
d18b99eb28145edea019c8748c08706e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetConsoleAliasW
GetFileAttributesA
SetEvent
GetModuleHandleA
HeapCreate
GetPrivateProfileStringW
GetDriveTypeW
EnumCalendarInfoW
LocalFree
ReadFile
CreateMailslotA
GetModuleFileNameA
SetLastError
ResumeThread
FindAtomW
EnterCriticalSection
GetCurrentThreadId
GlobalFree
GetCurrentProcessId
user32
GetCursorInfo
DispatchMessageA
CallWindowProcW
IsWindow
GetClientRect
GetKeyboardType
GetKeyState
DrawTextW
DispatchMessageA
GetClassInfoA
GetSysColor
SetFocus
GetMenuInfo
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ