Static task
static1
Behavioral task
behavioral1
Sample
1386da2da6ed3c2e1b5511c2c2c5f540_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1386da2da6ed3c2e1b5511c2c2c5f540_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1386da2da6ed3c2e1b5511c2c2c5f540_JaffaCakes118
-
Size
385KB
-
MD5
1386da2da6ed3c2e1b5511c2c2c5f540
-
SHA1
57d2ee8830c4bb9e26914063e7b68fa93049ab2b
-
SHA256
34552c22e8d18b3603c9cc88e4a0768499a9788ae03fe9214bcfb6f841595572
-
SHA512
a89fef96e8add6fffa3ebb32c5ac69040e7044c0f8282888c6396971018d954142fa9b2680155e6f67cb82aa04749ff8eaecff02906c1c4181a60eae34f36e6c
-
SSDEEP
6144:lAPcpCG0fJMHneMCDB6sEFu6XwydbyY9gHDtWGDSYAnLCI:54G0fchCd+RXwycY9gkGTALb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1386da2da6ed3c2e1b5511c2c2c5f540_JaffaCakes118
Files
-
1386da2da6ed3c2e1b5511c2c2c5f540_JaffaCakes118.exe windows:4 windows x86 arch:x86
4f312fc4002831b87befc0004904e673
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
GetACP
GetModuleHandleW
FreeConsole
GetMailslotInfo
CreateThread
WriteFile
GetPrivateProfileIntW
FindVolumeClose
ResumeThread
VirtualAlloc
GetEnvironmentVariableA
InterlockedExchange
GlobalFree
CloseHandle
GetDriveTypeW
ResetEvent
GetExitCodeProcess
lstrlenA
LocalSize
user32
EndDialog
GetClassInfoA
IsWindow
GetCursorInfo
GetClientRect
GetKeyboardType
DispatchMessageA
DrawStateW
GetSysColor
CreateWindowExA
GetSysColor
CallWindowProcW
SetFocus
qedit
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ