Static task
static1
Behavioral task
behavioral1
Sample
ead0860db98d761db5047d57d69f12a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ead0860db98d761db5047d57d69f12a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ead0860db98d761db5047d57d69f12a4_JaffaCakes118
-
Size
365KB
-
MD5
ead0860db98d761db5047d57d69f12a4
-
SHA1
20a6cfe5d007800b2355c854c8256ef5ae015c2e
-
SHA256
35f7718f006dfe50c2e3f2a6961f5758a14ba92619c5c45924cd0d76e1728484
-
SHA512
cfd41dd041d49cbf91041129340cadb67cbef5ec8af483dceb6879c5a39c594dc81ea66ef25196406e3e3d5da3c74756f45e5d987de5772fbc7cbb60eccd34c9
-
SSDEEP
6144:zNzRMca4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:JRM7x4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead0860db98d761db5047d57d69f12a4_JaffaCakes118
Files
-
ead0860db98d761db5047d57d69f12a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a2d47b2ecc5b3ae4f9e2b8f3d534ba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetFileAttributesA
CreateMailslotA
GetCurrentProcessId
GetDriveTypeW
FindClose
SetLastError
GetModuleHandleA
SetEvent
HeapCreate
GetModuleFileNameA
LocalFree
EnumCalendarInfoW
GetPrivateProfileStringW
GlobalFree
GetCurrentThreadId
ReadFile
GetConsoleAliasW
EnterCriticalSection
FindAtomW
user32
GetMenuInfo
GetClassInfoA
CallWindowProcW
GetSysColor
DispatchMessageA
GetKeyState
GetKeyboardType
DispatchMessageA
DrawTextW
GetClientRect
GetCursorInfo
IsWindow
SetFocus
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ