Static task
static1
Behavioral task
behavioral1
Sample
ed3e4f0431600c5a10f89133869659fb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed3e4f0431600c5a10f89133869659fb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed3e4f0431600c5a10f89133869659fb_JaffaCakes118
-
Size
156KB
-
MD5
ed3e4f0431600c5a10f89133869659fb
-
SHA1
30620a21ebc98d1ec219ffcd4ba07197783b7cfd
-
SHA256
67024adec2bf37dd83b7092f7021aa021bde41b138a48e8d72dbee3306b78cfa
-
SHA512
3e8813365f5934657ce707dd65f82c7352090b8b334f255436a37b4feb0220028cdc2cc764c4d4f2c9b32cf555d08a29c6e8fcdbd17d231c17d5d357115e2d4d
-
SSDEEP
3072:+/tWErZuw2US71mPuOrRawNI4SYNEUP0akL4QXW1Y3MsvH/zTIwtdAdWc5tg0T1+:+lZrZuw2GjnIls09LXQYc4/zTIwXAAKi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed3e4f0431600c5a10f89133869659fb_JaffaCakes118
Files
-
ed3e4f0431600c5a10f89133869659fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
8658d8d3a1f47e857d5e790da7e8f39b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
InterlockedIncrement
HeapFree
GetWindowsDirectoryA
WriteFile
HeapDestroy
SetErrorMode
ReadFile
lstrcatA
RaiseException
GetModuleHandleA
CloseHandle
DeleteFileA
lstrcpyA
lstrlenA
CreateFileA
HeapCreate
ExitProcess
user32
wsprintfA
GetKeyboardType
comctl32
ImageList_Copy
ord17
ImageList_Destroy
msvcrt
_except_handler3
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 454KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ