Static task
static1
Behavioral task
behavioral1
Sample
ebb46bcde0669a124014e54698f3e818_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebb46bcde0669a124014e54698f3e818_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebb46bcde0669a124014e54698f3e818_JaffaCakes118
-
Size
28KB
-
MD5
ebb46bcde0669a124014e54698f3e818
-
SHA1
16c7ee5088b8580b5981a4c24c0fd0315085a50c
-
SHA256
768e33e155df545359c19d49d736f26b3044382a6827d4db3e7c25344939c6e4
-
SHA512
9d8d8aab9a1bc0ffb20c0258e5edd81c92db8c69bcf54385e5b0350bcc8330462d1c3cb564daf4d74e8f6fcb5189c9dda1aa805266c427fe40c29bbfcbf9380f
-
SSDEEP
384:BFVepLnzd9YtHsRp+9XJLYGbpouzIM2lAtghQY8V+:BKLYjPbCuz47x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebb46bcde0669a124014e54698f3e818_JaffaCakes118
Files
-
ebb46bcde0669a124014e54698f3e818_JaffaCakes118.exe windows:4 windows x86 arch:x86
9aaa0135f5722fed6500b9fcc064c607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GlobalUnlock
CreateMutexA
CreateFileW
GetExitCodeProcess
SetLastError
lstrlenW
HeapCreate
GetProcessHeap
GetCurrentThreadId
GetStdHandle
GetEnvironmentVariableA
lstrcpyA
GlobalFree
CloseHandle
GetModuleHandleA
ReleaseMutex
FindResourceW
TlsGetValue
UnmapViewOfFile
user32
SetFocus
DrawMenuBar
IsWindow
CheckRadioButton
CallWindowProcA
GetCaretPos
GetDC
DrawEdge
CreateMenu
GetDlgItem
FillRect
CreateWindowExA
DispatchMessageA
rsaenh
CPDeriveKey
CPGenKey
CPHashData
CPDecrypt
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hgkyfua Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE