Static task
static1
Behavioral task
behavioral1
Sample
ec68d525bb925ccacd3b3517db58f179_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec68d525bb925ccacd3b3517db58f179_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec68d525bb925ccacd3b3517db58f179_JaffaCakes118
-
Size
88KB
-
MD5
ec68d525bb925ccacd3b3517db58f179
-
SHA1
ab3325c92096525aff06a7cefee6d4094a594150
-
SHA256
595ed6f2f922d2a97285e1a754e80b523d385ca43aac83fe227c595cc9bfb484
-
SHA512
2753685495dae85f96f37fbfa357d94e914c545705da5ebc43a3f7a3e39c3040a4da137f996c838debeb2875ac51ccf9668cb960d4b90c3aeb9cfd9d31a882bf
-
SSDEEP
1536:MOUPCCdVuUB24Ngwy6SogaaQg2nz+maUmHCNFt2zfLhX:vuCCuS24NfyogaaQdnzZVwLLh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec68d525bb925ccacd3b3517db58f179_JaffaCakes118
Files
-
ec68d525bb925ccacd3b3517db58f179_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e9d4e5b51c999dbe0ac9ad973433245
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesA
GetDateFormatA
IsBadCodePtr
LoadLibraryExA
DeleteCriticalSection
GetLastError
SetLastError
PulseEvent
FreeConsole
IsBadReadPtr
VirtualProtect
GetDriveTypeW
GetModuleHandleA
GetDiskFreeSpaceExW
GetCommandLineA
FindClose
CloseHandle
LocalFree
TlsGetValue
Sleep
shell32
StrChrA
ExtractIconA
DllUnregisterServer
SHFree
SHGetDiskFreeSpaceA
DragFinish
DuplicateIcon
DragAcceptFiles
ShellMessageBoxA
SHGetMalloc
SHGetSettings
DragQueryFileA
ShellAboutA
msasn1
ASN1BERDecCheck
ASN1BERDecBool
ASN1BERDecFlush
ASN1BERDecDouble
ASN1BERDecEoid
advapi32
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gdkvkst Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE