Static task
static1
Behavioral task
behavioral1
Sample
e0ce4aaf980988c8d814dbfba0ee097f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0ce4aaf980988c8d814dbfba0ee097f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0ce4aaf980988c8d814dbfba0ee097f_JaffaCakes118
-
Size
400KB
-
MD5
e0ce4aaf980988c8d814dbfba0ee097f
-
SHA1
db5586f43125d039d29559867c28bac6eb8da62c
-
SHA256
9c672a205d7d5795401d3b3e9bd17885f49fe708739fa44b4aa9776468fd7a7c
-
SHA512
3b511ac832979a3cc3f4d10ddb847e330638e2439aa55a07d63f29169e84fc5b2c852582bf292c9aa7c73be57d3429dcaf1a20176a60f5f61efe299aaf8dbb18
-
SSDEEP
12288:2gv/2BYbFdu7RNVnb9LHNZnXMtB9hPEOom:l2KfIRNtbtt1sBrHj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ce4aaf980988c8d814dbfba0ee097f_JaffaCakes118
Files
-
e0ce4aaf980988c8d814dbfba0ee097f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f5eed6d36b8c0beadd03ae207e857d08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
imagehlp
CheckSumMappedFile
oleaut32
SysFreeString
avicap32
capGetDriverDescriptionA
msacm32
acmMetrics
winmm
waveInStop
comctl32
ImageList_Add
advapi32
SetSecurityInfo
wininet
InternetOpenA
version
VerQueryValueA
user32
GetDC
mpr
WNetGetUserA
shell32
ShellExecuteA
wsock32
send
gdi32
SaveDC
ws2_32
WSAIoctl
Sections
.text Size: 391KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 159B - Virtual size: 159B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE