Static task
static1
Behavioral task
behavioral1
Sample
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118
-
Size
79KB
-
MD5
e1cd9b6139c606264db62a2570d7d163
-
SHA1
3acb5dbb2e03d0b302b58b09a0d3cde77d5bf8ff
-
SHA256
ef7d43ada28a3ce27c5a88bfc93282f83179f4d8fe3732824696eec9a9de1c39
-
SHA512
098c9f0a24c1aa93533f9b040aebf8aaf7fe9e1828afe50eb9dccf2afb3b3866c633a8471fcd5543d40ed7777fa47653e46e3199a260760659594d6c11e6af11
-
SSDEEP
1536:GQuTga8X62MTaUMMnMMMMMQqvuOYQIYQD7eRxA3PtYqcb+sCcNyOa+Mys9H1TDr:FukHFUMMnMMMMMX7I7D7eRa3FYqcbf5U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1cd9b6139c606264db62a2570d7d163_JaffaCakes118
Files
-
e1cd9b6139c606264db62a2570d7d163_JaffaCakes118.exe windows:4 windows x86 arch:x86
17cefbddee04bce92dc1934e6eac2c7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
FormatMessageW
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
rtutils
TraceDumpExA
ntdll
NtReplyPort
NtAllocateVirtualMemory
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE