Static task
static1
Behavioral task
behavioral1
Sample
e27a816d706a274c4b5c6d9c59eac353_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e27a816d706a274c4b5c6d9c59eac353_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e27a816d706a274c4b5c6d9c59eac353_JaffaCakes118
-
Size
413KB
-
MD5
e27a816d706a274c4b5c6d9c59eac353
-
SHA1
2a14bdad773fdb5faf6f3e8cedd1ce8dc87a9d01
-
SHA256
3fbd2ea3a67285f850bd9b5f16920d614980b074a10666b751b56e88c3b40756
-
SHA512
1bc77af1dd7472e1886b8ac351d47c1b51921b6e3b6e4321af33eebda7b24425a04f745820814eaf57b5087653ae2510d3d9cf610ce79b88ea3e3f3253f1d5b4
-
SSDEEP
6144:zIcTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ:zplxhikhoS4qL6iwTayNhcwaSBGZmS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e27a816d706a274c4b5c6d9c59eac353_JaffaCakes118
Files
-
e27a816d706a274c4b5c6d9c59eac353_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d082cdd6d8dcb58e79079624bedfa85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommState
GetStdHandle
CreateHardLinkA
ExitProcess
GetTapeStatus
ClearCommBreak
GetModuleHandleA
FindAtomA
FormatMessageA
GlobalFlags
CloseHandle
GlobalFree
EnterCriticalSection
GetOEMCP
GetUserDefaultLangID
CreateJobSet
GetVolumePathNameA
GlobalLock
VirtualAlloc
GetProcessHeap
GetProfileStringA
user32
GetParent
CloseWindow
RegisterClassA
GetWindow
EndPaint
ReleaseDC
GetFocus
GetClassNameA
GetClassInfoExA
GetForegroundWindow
IsIconic
BeginPaint
GetActiveWindow
GetWindowTextA
GetDC
ValidateRect
ShowWindow
DrawEdge
GetWindowTextLengthA
gdi32
CreateDIBitmap
CreateDCA
GetCharWidthA
GetColorSpace
ExtCreatePen
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ