Static task
static1
Behavioral task
behavioral1
Sample
e03821e639bf45b415bc7e01d328e428_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e03821e639bf45b415bc7e01d328e428_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e03821e639bf45b415bc7e01d328e428_JaffaCakes118
-
Size
822KB
-
MD5
e03821e639bf45b415bc7e01d328e428
-
SHA1
732cdcd39ab3e00be92d17fdb5f8eecb34c6ae79
-
SHA256
6478ef7841c459403bd8149dbd699d2a671601c188a7f7252cb400ef959609b7
-
SHA512
77bb2d6ef7d3104a15761874d2e42aedc343779904ba77de598fd79901d14d111b5f4056f91613fdeb02f81af36c2d7665324295943e26f6f235ae97f61f57b1
-
SSDEEP
24576:EV9VA95d4lJ5BW075rAUger0s+NOvqlGko3tN:EV9Vsb4b5BW0drAUgTNOvomt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e03821e639bf45b415bc7e01d328e428_JaffaCakes118
Files
-
e03821e639bf45b415bc7e01d328e428_JaffaCakes118.exe windows:4 windows x86 arch:x86
07eadc70af37d80cd9f0ecb8584c8ac5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
WriteFile
lstrlenA
GetExitCodeProcess
VirtualAlloc
CreateThread
GetPrivateProfileIntW
GetEnvironmentVariableA
ResetEvent
CloseHandle
GetModuleHandleW
GetDriveTypeW
FindVolumeClose
ResumeThread
LocalFree
GlobalSize
GetACP
GetCommandLineA
GlobalFree
InterlockedExchange
user32
IsWindow
DispatchMessageA
GetClassInfoA
GetCursorInfo
CreateWindowExA
GetClientRect
CallWindowProcW
GetSysColor
EndDialog
SetFocus
GetSysColor
DrawStateW
GetKeyboardType
netcfgx
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ