Static task
static1
Behavioral task
behavioral1
Sample
e7fd3ab02295d8ca54adf05b7bb574d9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e7fd3ab02295d8ca54adf05b7bb574d9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e7fd3ab02295d8ca54adf05b7bb574d9_JaffaCakes118
-
Size
151KB
-
MD5
e7fd3ab02295d8ca54adf05b7bb574d9
-
SHA1
86e6ae3ebf246d17b1e7b261a23f174f48c5d90d
-
SHA256
ee89cbaa2395f735ebc2330029e0b2ed520e11f62a4501b59898d050d1e550fa
-
SHA512
49bb66d9493c1e91095483dd9c554e75a0f6c5deafc7f14fba44a3066aedfce48c8ce97826635aca5b251c27deadd0bf54fb5ea01000435c82e3f3915353567a
-
SSDEEP
3072:lSmd+k4wAJcH5F3n/broRAgsY4fRHZkq5TEeetQyxk/rFL1f:14wAqmAPnHZNq9QWYBL1f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7fd3ab02295d8ca54adf05b7bb574d9_JaffaCakes118
Files
-
e7fd3ab02295d8ca54adf05b7bb574d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f624c43a40203301c83fa77972e14977
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
RemoveDirectoryW
HeapDestroy
CreateHardLinkA
SetLastError
HeapSize
GetFileSize
CreateFileA
LoadLibraryA
MapViewOfFile
SetLastError
FatalExit
GetStdHandle
ReadConsoleA
CreateMutexA
VirtualProtect
GetStartupInfoA
CancelIo
ReleaseSemaphore
RemoveDirectoryW
GetTickCount
DeleteFileW
ReleaseSemaphore
GetVersion
CreateDirectoryW
uxtheme
GetThemeBool
DrawThemeEdge
CloseThemeData
GetThemeColor
DrawThemeBackground
OpenThemeData
GetWindowTheme
SetWindowTheme
GetThemeSysSize
GetThemeTextMetrics
CloseThemeData
IsThemeActive
GetThemeTextExtent
msports
ComDBClaimPort
ComDBReleasePort
ComDBOpen
ComDBClose
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE