Static task
static1
Behavioral task
behavioral1
Sample
edca6587f66263acdd99f08507a07c6e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
edca6587f66263acdd99f08507a07c6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
edca6587f66263acdd99f08507a07c6e_JaffaCakes118
-
Size
67KB
-
MD5
edca6587f66263acdd99f08507a07c6e
-
SHA1
bdb555714fcd35fdc5a160026f9077ba3a7f11eb
-
SHA256
3752c65cb7b5a3eba879dd5cc2c6d24eeaf14ca1674d05b76b2ec3e7354ed5f6
-
SHA512
76bdc56f72bfb702bd04f6bcab747a8a0d8e30977d3bdace86e30ac1dce39d508660b4c0f73e7e4bdc8cefd38ed27ac21b8fd6f7533a0eca596361006a06141d
-
SSDEEP
1536:dlGfzMrzc9002EEuV+4F6RgWUTq89srD3lJzGIF+DFw+XCkcuEz:deMrzc90020V+n6oheDjXCkTEz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edca6587f66263acdd99f08507a07c6e_JaffaCakes118
Files
-
edca6587f66263acdd99f08507a07c6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d73dcd7d1b8c7ad23303104f8c4fc6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetProcessWindowStation
GetWindowTextA
GetWindowThreadProcessId
DispatchMessageA
MsgWaitForMultipleObjects
CloseDesktop
CharLowerBuffA
SetThreadDesktop
GetForegroundWindow
LoadCursorA
DrawIcon
GetKeyState
ToUnicode
GetMessageA
GetKeyboardState
FindWindowExA
GetDlgItemTextA
shlwapi
wnsprintfA
StrStrW
PathFindFileNameW
wnsprintfW
PathRemoveFileSpecW
PathFileExistsW
wvnsprintfA
PathMatchSpecW
PathCombineW
wvnsprintfW
advapi32
CryptCreateHash
RegDeleteValueA
DuplicateTokenEx
CryptHashData
RegSetValueExA
CryptGetHashParam
RegCloseKey
CryptReleaseContext
GetUserNameW
RegQueryValueExA
CryptDestroyHash
RegEnumKeyExA
kernel32
VirtualProtect
VirtualAlloc
OpenMutexW
ExpandEnvironmentStringsW
SetFileTime
CreateFileA
FindFirstFileW
CloseHandle
CreateEventW
ResetEvent
GetSystemTimeAsFileTime
MultiByteToWideChar
LeaveCriticalSection
lstrcmpiA
FindResourceW
GetFileAttributesA
lstrcatW
lstrcpyW
HeapFree
GetTickCount
GetCommandLineA
CreateProcessW
GetTimeZoneInformation
lstrlenW
GetFileSizeEx
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE