Static task
static1
Behavioral task
behavioral1
Sample
e1ed96ea6e2502e307fbe4d298082a79_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1ed96ea6e2502e307fbe4d298082a79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1ed96ea6e2502e307fbe4d298082a79_JaffaCakes118
-
Size
170KB
-
MD5
e1ed96ea6e2502e307fbe4d298082a79
-
SHA1
cdc7d7a199cf2c31fbf4380834d87ab8b6de6768
-
SHA256
dc91f64cc4b213c70359c47698f82d8420f553ce80d91e933a17d4e5660f5167
-
SHA512
ce957782a30da4300893e37901595dfb3fb9fe42e1910a14962b88908ee9842b956e241bc333d351c401ec0c9d9a2f7305fbd58ceef1fa18c1dc4a8f0fd934bc
-
SSDEEP
3072:LKaEvyj9h1uQyy2woldySHU98gsP5ygU:LKLqjn1nyyKhH6i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1ed96ea6e2502e307fbe4d298082a79_JaffaCakes118
Files
-
e1ed96ea6e2502e307fbe4d298082a79_JaffaCakes118.exe windows:4 windows x86 arch:x86
b31f5459baf0caf36d033a093fe5457b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
SetScrollInfo
ChildWindowFromPoint
GetActiveWindow
gdi32
CreateDIBSection
SetTextColor
GetBitmapBits
SetBkMode
CreatePalette
RestoreDC
GetDIBits
CreateCompatibleDC
SelectPalette
SetPixel
advapi32
RegCreateKeyA
GetLengthSid
RegEnumValueA
RegCreateKeyExA
kernel32
VirtualAlloc
GetCommandLineA
GetACP
GetCommandLineW
ExitThread
LocalAlloc
GetProcAddress
GetVersionExA
IsBadReadPtr
LoadLibraryExA
GetModuleHandleA
ExitProcess
GlobalAlloc
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES80 Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES83 Size: 1024B - Virtual size: 809B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES56 Size: 1024B - Virtual size: 875B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES12 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES86 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES57 Size: 1024B - Virtual size: 738B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES36 Size: 1024B - Virtual size: 761B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES03 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ