Static task
static1
Behavioral task
behavioral1
Sample
ec16f3d1dca8c3c8366286559ae37eb3_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ec16f3d1dca8c3c8366286559ae37eb3_JaffaCakes118
-
Size
406KB
-
MD5
ec16f3d1dca8c3c8366286559ae37eb3
-
SHA1
ee17fabc52414bba3fc44576851358a12f15bbd8
-
SHA256
ede2311b0dc0adf3290cba376e3d855ecd9a59b510107b48b03d30955a092e26
-
SHA512
2d36c615141cf4e884e8f33e8aa31290ac6a332a86595a35c826066ba518a59643309634b49c5c6707daeb58274d74f278716a9ecaafbfe4215a0354d4f1f717
-
SSDEEP
6144:WLTfzVyYWrjsCCFu3L4Ny8tyF+h74xTKlXBRkAzoJT6:efzYFBb4VtBhqiOIR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec16f3d1dca8c3c8366286559ae37eb3_JaffaCakes118
Files
-
ec16f3d1dca8c3c8366286559ae37eb3_JaffaCakes118.exe windows:6 windows x86 arch:x86
fb3173a5f2fac421132f53c478a667b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
atoi
_XcptFilter
__set_app_type
_except_handler3
_exit
_controlfp
__dllonexit
_onexit
free
fwrite
rand
_wtoi
strcspn
malloc
fread
__p__fmode
atof
rewind
system
fseek
memcpy
remove
fclose
fopen
__p__commode
ftell
winmm
PlaySoundW
kernel32
lstrcmpW
LocalFree
GetCommandLineW
VirtualProtect
GetModuleHandleA
GetStartupInfoA
shell32
CommandLineToArgvW
SHGetFolderPathW
user32
SetWindowPos
GetWindowRect
GetWindowTextLengthW
GrayStringA
GetDC
LoadImageW
PostQuitMessage
SetWindowLongW
wsprintfW
SetFocus
IsWindow
ShowWindow
GetSystemMetrics
SendMessageW
LoadImageA
GetSysColorBrush
LoadCursorW
TranslateMessage
RegisterClassW
DispatchMessageW
GetMessageW
RedrawWindow
GetClientRect
DrawTextW
InvalidateRect
GetWindowTextW
DefWindowProcW
FillRect
SetWindowTextW
MapWindowPoints
CreateWindowExW
gdi32
CreateSolidBrush
SetBkMode
SetTextColor
SelectObject
BitBlt
SetBkColor
GetStockObject
CreateFontW
CreateCompatibleDC
GetObjectW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ