Static task
static1
Behavioral task
behavioral1
Sample
0e8bf75e3f8b2c85945c58eeb7f1afad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e8bf75e3f8b2c85945c58eeb7f1afad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e8bf75e3f8b2c85945c58eeb7f1afad_JaffaCakes118
-
Size
65KB
-
MD5
0e8bf75e3f8b2c85945c58eeb7f1afad
-
SHA1
b0547ff2044626f297d98438c687a1df40b1d41e
-
SHA256
6bf547f17002fd30de282700abf494e7e0766f3ab09918c5c919c728c1cd62ef
-
SHA512
9af55554215a595ef8a8dbb614af73afc2b4056d979ec1ce5956b5a9124e75e36353bd7fde94018729e70bfa9bcc95a5432af4dd02de84f561f0efa720b1f17f
-
SSDEEP
1536:4bl0zZ/iCw59di8LBFK7DIzfdC8l9C5xh3x:00zZqhdimwUs8lM5xz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8bf75e3f8b2c85945c58eeb7f1afad_JaffaCakes118
Files
-
0e8bf75e3f8b2c85945c58eeb7f1afad_JaffaCakes118.exe windows:4 windows x86 arch:x86
70266f21bf9e8fbe0a4177a12b3dd9a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LsaEnumerateTrustedDomains
LsaGetRemoteUserName
LsaICLookupNames
LsaLookupPrivilegeDisplayName
RegCloseKey
LsaGetUserName
dsound
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate8
kernel32
GetModuleHandleA
GetLocalTime
GetCommandLineA
ExitProcess
CloseHandle
LocalAlloc
SetUnhandledExceptionFilter
GetStartupInfoA
msvfw32
MCIWndCreateA
ICLocate
ICInstall
DrawDibGetBuffer
DrawDibChangePalette
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoGetClassObject
CreateStreamOnHGlobal
DoDragDrop
GetRunningObjectTable
OleInitialize
OleLockRunning
OleUninitialize
ProgIDFromCLSID
ReadClassStg
StgCreateDocfileOnILockBytes
WriteClassStm
CoCreateInstance
CLSIDFromProgID
CreateBindCtx
msvbvm60
__vbaFailedFriend
__vbaCyMul
user32
CreateAcceleratorTableA
IsCharUpperA
LoadIconA
ShowCursor
CharToOemA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ