Static task
static1
Behavioral task
behavioral1
Sample
e278a0997ca4107f5ae6c297d687e98b_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e278a0997ca4107f5ae6c297d687e98b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e278a0997ca4107f5ae6c297d687e98b_JaffaCakes118
-
Size
78KB
-
MD5
e278a0997ca4107f5ae6c297d687e98b
-
SHA1
730625b9dac51d291b6427e446c5574b65304946
-
SHA256
75599a8cc5f559d3c5d4500bac97319e8a8aa5726fdf370bf977140c4419641a
-
SHA512
ee42063a937e1dcb7641610cdf5330edf1d4fcc73da4c98282e0cb4e72a6fdabefc6b426ec63216f592e3b4ad660e48890ebfbe7905404b3b5671bf66687bb69
-
SSDEEP
1536:/m+FtoAkaEJWkpCsAwywIH9qYsACyQvXOv1iUXTmYdz0wCoKJlIK:jojaEJPQgywkcY3QXOv1fmk9CoKJlIK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e278a0997ca4107f5ae6c297d687e98b_JaffaCakes118
Files
-
e278a0997ca4107f5ae6c297d687e98b_JaffaCakes118.exe windows:4 windows x86 arch:x86
bad72ab10b10c67cb1b9c04ad9d8ea1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileSize
LoadResource
FindResourceA
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
HeapReAlloc
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
RegisterClassExA
CreateWindowExA
UpdateWindow
LoadStringA
GetClientRect
DefWindowProcA
DestroyWindow
DrawTextA
PostQuitMessage
BeginPaint
EndPaint
GetSystemMetrics
wsprintfA
ShowWindow
gdi32
Rectangle
SetPixel
TextOutA
CreateBitmap
shell32
StrStrIA
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ