Static task
static1
Behavioral task
behavioral1
Sample
e7cda28f6bb1af9a79e0f62c5023542e_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e7cda28f6bb1af9a79e0f62c5023542e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7cda28f6bb1af9a79e0f62c5023542e_JaffaCakes118
-
Size
442KB
-
MD5
e7cda28f6bb1af9a79e0f62c5023542e
-
SHA1
c07f32454cc7db43e6300fbcad51292b47c50f9e
-
SHA256
d45ce0bd8aa77d95c77a0761f4d9a1de55f7bd38f91c5371947219e8152217fd
-
SHA512
1f5ca2e69f62082f3b03408dddfec08e545182f32b34ac95b0ccf0b7b78a4002c3613fe29e317a7d6ab5ae93048232b2053d155eda702c0ba940bfbb66482187
-
SSDEEP
12288:BNyI2zLhIM420l+ZxKmxfBwTix3wScXgS:BNn2zLCi08df8ix313S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7cda28f6bb1af9a79e0f62c5023542e_JaffaCakes118
Files
-
e7cda28f6bb1af9a79e0f62c5023542e_JaffaCakes118.exe windows:4 windows x86 arch:x86
77d38d7ed40e2e030fc0704d4cf111ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
msvcrt
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
realloc
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncpy
__setusermatherr
_stricmp
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v.e2znvu Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b4ueo312 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ