Static task
static1
Behavioral task
behavioral1
Sample
e186c518e0b8dc109e40a6f363d68298_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e186c518e0b8dc109e40a6f363d68298_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e186c518e0b8dc109e40a6f363d68298_JaffaCakes118
-
Size
335KB
-
MD5
e186c518e0b8dc109e40a6f363d68298
-
SHA1
b55c90efd959c59fb2260af6698c18e30b4070a5
-
SHA256
d8c9e80c96591587e1ebadd5f73b842b2a5f61d7f2706d4a5b70ea6e24399461
-
SHA512
29a30a564514d3bc728cb26a1c5d45e2dd932a18eacd30332524f6338f585a0338d358fb12e47c0ec2eb5053a23edcbfb3ee26f72b77175d35d5b2c6faf088fd
-
SSDEEP
6144:vHHpqUyOFNvbvXVHanq5YMyj0GoFtqSAsXQNkSN4SvoCBHxBnZBZ:vpqUTXrFP5ne4QviSvXBHTZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e186c518e0b8dc109e40a6f363d68298_JaffaCakes118
Files
-
e186c518e0b8dc109e40a6f363d68298_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ed018cda96693afa4c502e18c2eef01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsDialogMessageA
TileWindows
GetNextDlgTabItem
GetDlgCtrlID
FindWindowExA
GetWindowRect
GetWindowThreadProcessId
IsChild
SetDlgItemInt
kernel32
GetModuleHandleA
GetStartupInfoA
VirtualAlloc
GetLastError
OpenEventA
TlsGetValue
CloseHandle
LocalFree
ReleaseMutex
GetProcAddress
OpenSemaphoreA
GetExitCodeThread
SetEvent
GetACP
TlsSetValue
CreateSemaphoreA
LCMapStringA
OpenMutexA
PulseEvent
GetModuleFileNameA
LocalReAlloc
ResumeThread
GetEnvironmentVariableA
winspool.drv
ClosePrinter
DeletePrinterConnectionA
ConfigurePortA
DeletePrinterKeyA
AddPrinterA
AddFormA
AdvancedDocumentPropertiesA
AddPrinterConnectionA
DeleteFormA
DeletePrinterDataA
AddJobA
msvcrt
_except_handler3
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
_adjust_fdiv
__p__commode
_controlfp
_initterm
__set_app_type
__p__fmode
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fmlrh Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ