Static task
static1
Behavioral task
behavioral1
Sample
8e9476f8035f0a6c74367c00449282bf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8e9476f8035f0a6c74367c00449282bf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8e9476f8035f0a6c74367c00449282bf_JaffaCakes118
-
Size
359KB
-
MD5
8e9476f8035f0a6c74367c00449282bf
-
SHA1
21d66774f2bdeb5c3dd20fc60361eebc8b9a30a4
-
SHA256
6545da14dd3ad0259958f21b6d97724f295d9657cde01dbf0ac904515f86b3c8
-
SHA512
c6a5709c283a3ea0053403d464e12999485464fa3bb97c37d92d8ce98ba4818c1d0155dda306075270d86466d5567f09252640030d62abbf02f6098242cd4daf
-
SSDEEP
6144:d4sHjHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVN:dvHjR9QI0Ay6fYvzEOe2KNSQ6l83zBzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e9476f8035f0a6c74367c00449282bf_JaffaCakes118
Files
-
8e9476f8035f0a6c74367c00449282bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
657da8bda5acb53bd47371d9906f2748
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
LoadLibraryA
GetCommandLineW
lstrlenA
GetDiskFreeSpaceW
ExitProcess
CreateFileA
LocalFree
ResetEvent
GetSystemTime
CloseHandle
HeapCreate
GetDriveTypeA
GetTickCount
GetTickCount
GetFileAttributesA
FindAtomW
GetComputerNameW
ReleaseMutex
GetModuleHandleW
user32
DestroyCaret
DispatchMessageA
CloseWindow
EndDialog
GetDlgItem
GetCaretPos
GetMenu
CreateWindowExA
GetComboBoxInfo
CallWindowProcA
FillRect
DrawStateA
GetClassInfoA
rasapi32
DwCloneEntry
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
RasDialA
modemui
CountryRunOnce
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ