Static task
static1
Behavioral task
behavioral1
Sample
e948a0ee7ad3344bf8848f563e348018_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e948a0ee7ad3344bf8848f563e348018_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e948a0ee7ad3344bf8848f563e348018_JaffaCakes118
-
Size
18KB
-
MD5
e948a0ee7ad3344bf8848f563e348018
-
SHA1
c781313bbdae03a4fd2bac0c9ea0434fb81b082b
-
SHA256
e903cbd182ca7ef593fbaa10b7e4e8c05a95828f90efbf6a8a8f4e12aa642539
-
SHA512
380d7f3ea406a6008885a1d2150b71c44ae28abd54a97232d0b3e59c5c101b028a479db98b395f558ba3bda5f9d02ad186cbd81edb1e317d1553d8d6549b1093
-
SSDEEP
192:YBof1cLyIAp1glGJcHmNqnvn1GMmAhvMYrlhgmWhzssxJ7wLSZJ8WOsdZKBxTRy:bcLyT1gI6mqnUA2YphED7wsuWO8KBxo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e948a0ee7ad3344bf8848f563e348018_JaffaCakes118
Files
-
e948a0ee7ad3344bf8848f563e348018_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2c660e12a9e7ec102e522b07d22d1dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
HeapCreate
GetProcessVersion
GetEnvironmentStringsA
WaitForSingleObject
VirtualProtect
HeapDestroy
IsDebuggerPresent
GetModuleHandleA
GetStdHandle
GetCurrentProcessId
InterlockedExchange
GetACP
GetCurrentThread
DeleteAtom
GetTapeStatus
CreateFileMappingA
LoadLibraryExA
CreateHardLinkA
GetCommConfig
GetLogicalDrives
user32
EndPaint
wsprintfA
ShowWindow
GetParent
GetFocus
SetForegroundWindow
GetCursorPos
DrawTextA
FillRect
GetWindowTextLengthA
SetActiveWindow
BeginPaint
ReleaseDC
GetWindow
GetTitleBarInfo
GetDlgItem
FrameRect
DragDetect
GetClassNameA
advapi32
RegFlushKey
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegEnumKeyA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ