Static task
static1
Behavioral task
behavioral1
Sample
ec57d6776dcf8ee7b93cd53e85123626_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec57d6776dcf8ee7b93cd53e85123626_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec57d6776dcf8ee7b93cd53e85123626_JaffaCakes118
-
Size
85KB
-
MD5
ec57d6776dcf8ee7b93cd53e85123626
-
SHA1
a98a277ab952705f100aba1e0a3d58468edd17d5
-
SHA256
1ac832e420fd4adacf4df77839fb5209df763b96a18af7bb4c119f68e917169f
-
SHA512
f4bc404e4e46fd29699a7706f8e5a4748009e345b4a343a5e24e225809b130e0f3dc7904a3a15d81cf7aade6efb2bda0a2e8503e0b1074276dd6b10368aa8520
-
SSDEEP
1536:IW6vt4UfVPdKULDlLG5ErQJOIoR/cwtFg:/6V5l45jAFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec57d6776dcf8ee7b93cd53e85123626_JaffaCakes118
Files
-
ec57d6776dcf8ee7b93cd53e85123626_JaffaCakes118.exe windows:5 windows x86 arch:x86
5f42f9b86a3426e7cdb8e811723f1798
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
WaitForSingleObject
Sleep
CreateProcessA
lstrcatA
LoadLibraryA
WinExec
DeleteFileA
lstrcpyA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
LoadCursorA
CopyIcon
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ