Static task
static1
Behavioral task
behavioral1
Sample
ec807963e7754eb05d2b8abac3b78768_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec807963e7754eb05d2b8abac3b78768_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ec807963e7754eb05d2b8abac3b78768_JaffaCakes118
-
Size
56KB
-
MD5
ec807963e7754eb05d2b8abac3b78768
-
SHA1
1839796ed5b00bffbd57ec064a3cd3307b298857
-
SHA256
bd30fa6ca019cb681abed9210468530f737aae08cdb600745ddb471d034409ef
-
SHA512
41b05b9b5420e248295fefb503c1cb7aa380a686eaf3d9d84295d3d64eca51a7925ff296252d1b1e3914d35e90ac54e1a8f62c9e719fd0579df1b1687142410f
-
SSDEEP
768:dgt+Au0PA38ooGWKdc6UQuS6cpV6rmcgJ2Wvm2X:dpPoGvn5pFpVkgvvv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec807963e7754eb05d2b8abac3b78768_JaffaCakes118
Files
-
ec807963e7754eb05d2b8abac3b78768_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a4795ef26814173817e68ad0c22c8e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
DeleteFileA
lstrcatA
GetCurrentProcess
GetCPInfo
GetACP
GetStringTypeW
GetStringTypeA
SetEndOfFile
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
VirtualAlloc
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
ReadFile
VirtualFree
GetOEMCP
SetHandleCount
RtlUnwind
GetFileType
HeapDestroy
HeapCreate
CloseHandle
WriteFile
HeapFree
GetLastError
SetFilePointer
oleaut32
SysFreeString
ole32
CoUninitialize
CoCreateInstance
CoInitialize
user32
GetSystemMenu
EnableMenuItem
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
MessageBoxA
DestroyWindow
CreateDialogParamA
comctl32
ord17
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE