Static task
static1
Behavioral task
behavioral1
Sample
e2c1e91691bce7152a429be92b2290e1_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e2c1e91691bce7152a429be92b2290e1_JaffaCakes118
-
Size
80KB
-
MD5
e2c1e91691bce7152a429be92b2290e1
-
SHA1
c2c2cdf5e070a72751f2d6bc21c2a168db2771ef
-
SHA256
83235555bf9ccfae6db1ee42ce48782284fc13f4e67053e73bbb0e250ad568fa
-
SHA512
05594b11dc74e21330b6dd07bec178dec66ee52a3d070c9c126859268a6d82d88d6a12c6846e5676cc5607c3b8e45030c3fb8a0dc1fa2b86c5012d0c4f0cdc03
-
SSDEEP
1536:EW5CsutLqgHvoEs1gAUGyylQs9uPb4jOeA3lMKrdaiGMzAlq:j5SBqgPgWDGyyOs9V7JirzAY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2c1e91691bce7152a429be92b2290e1_JaffaCakes118
Files
-
e2c1e91691bce7152a429be92b2290e1_JaffaCakes118.exe windows:1 windows x86 arch:x86
dab5acf21ebe106fff8689183b007759
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegSetValueExA
Sections
CODE Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE