Static task
static1
Behavioral task
behavioral1
Sample
1129af2f1b495a07cff851c9195215fc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1129af2f1b495a07cff851c9195215fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1129af2f1b495a07cff851c9195215fc_JaffaCakes118
-
Size
298KB
-
MD5
1129af2f1b495a07cff851c9195215fc
-
SHA1
00e78eb79657e2ea3fd97932f0806a40d4b26c2c
-
SHA256
ede0c1d29f9a5e3f7e8ece72d616a85273b7fb46db22f6d35331e996a83c663a
-
SHA512
c1faa6527cf1ab4b2c9b9a9a08c8f5ad48fdb189232d1acba0e899aae58455755833ea57daebd319d032871cd023eeacfa37665fde4242cc390231fcda17f990
-
SSDEEP
6144:wAXCeYl/UZqUN55D2WtZC1jcui0eZa4bhce3ojEA:wAXCeYNjGD2Wi1jtdia4tcDjE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1129af2f1b495a07cff851c9195215fc_JaffaCakes118
Files
-
1129af2f1b495a07cff851c9195215fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
98200abf44c8dc55b62c329ac9518bcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseSemaphore
HeapFree
GetModuleHandleA
VirtualProtectEx
ResetEvent
OpenEventW
CreateMutexA
RemoveDirectoryA
GetCommandLineA
GetFileType
FindClose
SetStdHandle
GetDriveTypeA
WriteConsoleW
WriteFile
FindClose
lstrlenA
CreateFileMappingW
CreateDirectoryW
ReleaseMutex
GetTickCount
CreateFileA
DeleteFileA
RemoveDirectoryA
Beep
user32
MessageBoxA
DispatchMessageA
DrawTextW
DestroyMenu
CreateIcon
GetSysColor
DestroyMenu
FindWindowA
GetClassInfoA
PeekMessageA
GetWindowLongA
IsZoomed
IsWindow
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ