Static task
static1
Behavioral task
behavioral1
Sample
e85356b91b376789c14ce7951b6dc4f7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e85356b91b376789c14ce7951b6dc4f7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e85356b91b376789c14ce7951b6dc4f7_JaffaCakes118
-
Size
36KB
-
MD5
e85356b91b376789c14ce7951b6dc4f7
-
SHA1
e6b735dcdce940ca1c41615ee2a8b915a13520a3
-
SHA256
7de4805f0d645bb71de01256545f931e2c40218c7d8598e8fb0a7b674ab14438
-
SHA512
6a97520878ff9350f55b93d2dd017fe992af776a3f0f2ab9f69931e8442ba1d57c845840c8d32ab97134b54d3e0ec81696fafbd498b21b7eb71945cb4bfbdab7
-
SSDEEP
384:0zupvEeoRjQI23CdbKeBNzTW7C91mKdyUlXz84t6:0svEztl4EN5MKdhlj84t6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e85356b91b376789c14ce7951b6dc4f7_JaffaCakes118
Files
-
e85356b91b376789c14ce7951b6dc4f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6dda644aec921baa6b11777d5b9435c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Sleep
WinExec
GetVersionExA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE