Static task
static1
Behavioral task
behavioral1
Sample
e84040fc6996e65aeca2d2457a06f96d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e84040fc6996e65aeca2d2457a06f96d_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e84040fc6996e65aeca2d2457a06f96d_JaffaCakes118
-
Size
2.3MB
-
MD5
e84040fc6996e65aeca2d2457a06f96d
-
SHA1
f9718c2860be5c4319fecbeab3b9c5e0d3c58163
-
SHA256
e91c841ea146491af94a31725d39b4d89d5db98ac3b39f44bf5ca98ed6c4ace1
-
SHA512
d03a36dd56bc36248ecf5c22116ad365d29cf84e8c9fcb67519e19710c11285f9b4bf36323a5cb7539aeee01895314d6e0a07eefbdbc6b0b6bfc8877987fdd85
-
SSDEEP
49152:GeQJnUCaFMOzb1Mt7wHLvvVmMZNUXlnb2JEzODrEJZwC:GnnaFMOzChwH0MZNglb2uzEgJZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e84040fc6996e65aeca2d2457a06f96d_JaffaCakes118
Files
-
e84040fc6996e65aeca2d2457a06f96d_JaffaCakes118.exe windows:1 windows x86 arch:x86
bf51eaa99adc286fdc4205f134e1be28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
GetKeyboardType
MessageBoxA
advapi32
RegQueryValueExA
oleaut32
VariantCopyInd
gdi32
StretchBlt
comctl32
ImageList_GetIconSize
imagehlp
ImageDirectoryEntryToData
shell32
ShellExecuteA
Sections
CODE Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspr0 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr1 Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr2 Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr3 Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ