Static task
static1
Behavioral task
behavioral1
Sample
e016db52c5d770707a0480bfd57f0301_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e016db52c5d770707a0480bfd57f0301_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e016db52c5d770707a0480bfd57f0301_JaffaCakes118
-
Size
76KB
-
MD5
e016db52c5d770707a0480bfd57f0301
-
SHA1
282d739116b5f38eb31013461df0bf3668e22b10
-
SHA256
a472e4a94e3911135c78729eedcf3cc70f5cdc198d4bd34fdf91b8a64a15596e
-
SHA512
0d49eb9ede251ade55a6ef3d1e76214016f0d8aa33c05a5f831ec4d7a5b8aec818e4e1c7a8789662d066b052e38d43b3382e23851033340fc6e123bddd3df349
-
SSDEEP
768:nLp1PiF3p4jrnYfoghhL5katFEhQIvfBRL8lyt/l:nF5iFijrnOjFXtM1vrgl6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e016db52c5d770707a0480bfd57f0301_JaffaCakes118
Files
-
e016db52c5d770707a0480bfd57f0301_JaffaCakes118.exe windows:4 windows x86 arch:x86
c4e177591742e6371344fc0fac54cb31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharLowerA
advapi32
OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
kernel32
SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle
Sections
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE