Static task
static1
Behavioral task
behavioral1
Sample
edd419362e3e24becae364d3bbe8ae5c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
edd419362e3e24becae364d3bbe8ae5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
edd419362e3e24becae364d3bbe8ae5c_JaffaCakes118
-
Size
50KB
-
MD5
edd419362e3e24becae364d3bbe8ae5c
-
SHA1
0055e816b420b672afbd8a2e3441e5ae46251ab0
-
SHA256
2c4aa654658aaf541bfc617944b5f2f9572056c3760c3e2b2165fbf0cabe496e
-
SHA512
ff9dde320c98daeb7ee087f4a3decaf6c593167e307834b4d7f97fc3c531d2600b239a4c6da3fa41a19a1faa6b99ddbb715ea583eaa5a01246a117dea2cf4ae4
-
SSDEEP
768:7mFIWUvTJsimo84o8BDo2ChB+7gWrzeFiw+Lv28PlLxz+Wlgw5fxLiBvd:7muWUrqxo84o8BD6Fiw+j28PlSMUBV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edd419362e3e24becae364d3bbe8ae5c_JaffaCakes118
Files
-
edd419362e3e24becae364d3bbe8ae5c_JaffaCakes118.exe windows:5 windows x86 arch:x86
2d3160b72b35d7654dbf7754fe92e320
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
kernel32
GetUserDefaultUILanguage
shlwapi
PathFileExistsW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
EndDialog
GetClassNameA
GetCursorPos
GetDlgItem
GetWindowLongA
GetWindowThreadProcessId
LoadCursorA
OpenWindowStationA
PeekMessageA
SetProcessWindowStation
Sections
.zal Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jah Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pqt Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ