Static task
static1
Behavioral task
behavioral1
Sample
e1b9bd5b8dea5986376add1cf7673905_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1b9bd5b8dea5986376add1cf7673905_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1b9bd5b8dea5986376add1cf7673905_JaffaCakes118
-
Size
306KB
-
MD5
e1b9bd5b8dea5986376add1cf7673905
-
SHA1
ec41010cf8a423756db29c204be1e274676b818b
-
SHA256
3ba9cc9fc6bc63dc961c9f7b414a958b57ba4f9bbab7be0a8eb28730291c463a
-
SHA512
df126619641f31a7ac0ebc784e1d6c57a665c57a56ac8cdfea7409f4e77d55f7c1ddeac5119f3882c1e68206ad253627171a7dcb985e90d81f301a3c1cac2deb
-
SSDEEP
6144:qTksqecIT98jHerZZkQraLXxU/0OQf0GeNKAxn5ymJv4GU:skbIT98jHerZZOu/0OPGeNRn5v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b9bd5b8dea5986376add1cf7673905_JaffaCakes118
Files
-
e1b9bd5b8dea5986376add1cf7673905_JaffaCakes118.exe windows:4 windows x86 arch:x86
5282b8028448253679ec35a4d0de34fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
ReportEventA
oleaut32
SafeArrayPtrOfIndex
wsock32
WSACleanup
version
VerQueryValueA
msacm32
acmFormatChooseA
user32
CreateWindowExA
avicap32
capCreateCaptureWindowA
mpr
WNetOpenEnumA
gdi32
UnrealizeObject
shell32
Shell_NotifyIconA
winmm
waveOutWrite
wininet
InternetReadFile
ws2_32
WSAIoctl
comctl32
ImageList_SetIconSize
Sections
CODE Size: 294KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
love Size: 50B - Virtual size: 50B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE