Static task
static1
Behavioral task
behavioral1
Sample
e05e8d5a59cd2fb4ea8a67ffe296fcc7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e05e8d5a59cd2fb4ea8a67ffe296fcc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e05e8d5a59cd2fb4ea8a67ffe296fcc7_JaffaCakes118
-
Size
256KB
-
MD5
e05e8d5a59cd2fb4ea8a67ffe296fcc7
-
SHA1
673a80e911f785cc54083ead3d5997d7c5651ab7
-
SHA256
92cf4bb88f57cbf8c454a3040183d189f110a12c596cfd3d48cf0d2971514cb4
-
SHA512
d529540b7f9965697256e2b3c218aeefc59889ee9118e19d55ab0d46ca06e338e6e7e3b4410a98e5bdbe302cb5fd0d1e501d6011f89e5f635c5fa5c1dcf233b3
-
SSDEEP
3072:yXjF9SZ+MdvLAoGPMMMMMMMZaUtVxMVlm+:yzF9SZPBGPMMMMMMMTDZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e05e8d5a59cd2fb4ea8a67ffe296fcc7_JaffaCakes118
Files
-
e05e8d5a59cd2fb4ea8a67ffe296fcc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc7e5c646bb138df351d718c86445f42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetEntryPropertiesA
RasEnumDevicesA
RasSetEntryPropertiesA
RasValidateEntryNameA
RasGetErrorStringA
RasDeleteEntryA
RasGetConnectStatusA
RasDialA
RasEnumConnectionsA
RasHangUpA
RasEnumEntriesA
mfc42
ord389
ord3215
ord5201
ord5207
ord5356
ord1988
ord690
ord823
ord825
msvcrt
_mbschr
strlen
memcpy
memset
sprintf
_mbsstr
atoi
__CxxFrameHandler
_purecall
strncmp
fprintf
_stricmp
_strcmpi
_ltoa
tolower
isalpha
isalnum
isspace
strcat
strcpy
time
strstr
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strnicmp
strcmp
fputs
kernel32
HeapAlloc
HeapFree
GetProcessHeap
LockResource
DeleteFileA
SetEvent
OpenEventA
CreateEventA
CloseHandle
CreateProcessA
OpenProcess
GetCurrentProcessId
CreateFileA
CopyFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
GetCommandLineA
GetVersion
GetLastError
CreateMutexA
GetProcAddress
GetModuleHandleA
Sleep
LoadLibraryA
lstrcatA
lstrcpyA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpiA
WinExec
GetStartupInfoA
WaitForSingleObject
GetVolumeInformationA
SizeofResource
FindResourceA
LoadResource
user32
DispatchMessageA
WaitForInputIdle
IsDialogMessageA
TranslateMessage
PeekMessageA
CreatePopupMenu
AppendMenuA
GetCursorPos
TrackPopupMenu
DestroyMenu
InvalidateRgn
SystemParametersInfoA
MoveWindow
wsprintfA
CreateDialogParamA
SetCursor
EndDialog
DestroyIcon
GetDlgItem
SetWindowTextA
KillTimer
GetWindowTextA
SendMessageA
UpdateWindow
PostQuitMessage
GetMessageA
DialogBoxParamA
MessageBoxA
LoadImageA
RegisterClassExA
DefWindowProcA
BeginPaint
EndPaint
ShowWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
SetTimer
gdi32
DeleteObject
CreateFontA
SelectObject
TextOutA
advapi32
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
ExtractIconA
winmm
timeGetTime
Sections
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE