Static task
static1
Behavioral task
behavioral1
Sample
e1b305ce03f2374f5d92a1fcad8e1d4d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e1b305ce03f2374f5d92a1fcad8e1d4d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1b305ce03f2374f5d92a1fcad8e1d4d_JaffaCakes118
-
Size
170KB
-
MD5
e1b305ce03f2374f5d92a1fcad8e1d4d
-
SHA1
b8a2ed0ba737b7a68c7e0de1fb123e30aa3e750d
-
SHA256
439d7d049216cbe1fe3678998b155c8f20d34d7ea2abd93c1a662e1dd3cce927
-
SHA512
8185028dcda8239f1966a0f757d0a9e5f23a8512c3507f127ec7551925e4713dc8d953d122718d7dbbda662f23412003e59f0dd3ba85dd8ad38f05e4dfaf309a
-
SSDEEP
3072:XuPSAcsQbRyXGvWi9f4jqIzeRoWnl/0FnwUTQfnjuDEV5n1J/KKNAh2NjVaf1+hx:XRxfR9gjqIzeaWnlaLur5rh62T0+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b305ce03f2374f5d92a1fcad8e1d4d_JaffaCakes118
Files
-
e1b305ce03f2374f5d92a1fcad8e1d4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4e686d80826bc2743059641f5ed6bd5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddBackslashA
kernel32
LeaveCriticalSection
GetAtomNameW
Sleep
ResetEvent
FileTimeToSystemTime
IsDBCSLeadByte
EnterCriticalSection
LoadLibraryW
LoadLibraryA
InitializeCriticalSection
EnumResourceNamesA
CreateThread
WaitForSingleObject
GetProcAddress
SetEvent
QueryMemoryResourceNotification
GetFullPathNameA
DeleteCriticalSection
GetTempPathA
lstrcpyA
GetTickCount
OutputDebugStringA
GetTimeZoneInformation
GetFullPathNameW
FreeLibrary
winmm
mciSendCommandA
sndPlaySoundA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ