Static task
static1
Behavioral task
behavioral1
Sample
e40f0995144816dd8a6062c5e6cee39b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e40f0995144816dd8a6062c5e6cee39b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e40f0995144816dd8a6062c5e6cee39b_JaffaCakes118
-
Size
424KB
-
MD5
e40f0995144816dd8a6062c5e6cee39b
-
SHA1
531a334a0be99aff4c74f9a8dfd81ea8f3630360
-
SHA256
bcbc1aee86f5e1fdc2ba6fcb2e29933933b132a4c3d0f2eb0f73061702041243
-
SHA512
31623dcd88d0df8559b2662540c2cc740a2a46863bc247578ff4f7cbe758581d3a0db051b98e15cbd39c4ec386d8f84605ff6198d1c29e1aa4c1c1c8c9f1a8c4
-
SSDEEP
12288:D/BIjVBIpK5ogxO4tnkIHXAipyNZblCJxfS6:TBIjVD5oSOGkIHXAG0VOR1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e40f0995144816dd8a6062c5e6cee39b_JaffaCakes118
Files
-
e40f0995144816dd8a6062c5e6cee39b_JaffaCakes118.exe windows:4 windows x86 arch:x86
a307b933da9d05ec2b0fe2f562a956b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
clusapi
OpenCluster
ntdsapi
DsFreeSpnArrayA
kernel32
GetTapeStatus
GetModuleFileNameA
DeleteTimerQueue
SetFirmwareEnvironmentVariableA
CreateThread
HeapWalk
SetFilePointerEx
GetFirmwareEnvironmentVariableA
GlobalMemoryStatusEx
user32
wsprintfW
ole32
HMENU_UserUnmarshal
comdlg32
PageSetupDlgW
ChooseColorA
oleaut32
VarCyFromI1
msvcrt
isalnum
wcstoul
memcpy
pdh
PdhGetCounterInfoW
urlmon
CoInternetCombineUrl
setupapi
SetupBackupErrorA
imm32
ImmDestroyContext
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ordo Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t Size: 4KB - Virtual size: 46B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mrt1 Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ