Static task
static1
Behavioral task
behavioral1
Sample
edb850f50e6eb6aecdc5a63e8dfb7374_JaffaCakes118.exe
Resource
win7-20240319-en
General
-
Target
edb850f50e6eb6aecdc5a63e8dfb7374_JaffaCakes118
-
Size
37KB
-
MD5
edb850f50e6eb6aecdc5a63e8dfb7374
-
SHA1
220cc44c3af82e1c8765a368dc71fd194a2d6777
-
SHA256
c7f30552fa5282a4ebb62c77b6194747696716c708dde1e21c687062a9b2678a
-
SHA512
b15d938345350e3e226e67c690e1dc6b042c20ba8eb00480992aa0da03a9cd9c5e3eafac9e6e7a086276891f2a073b6cfb7e1cccb4de27f6c03ae6b7d99e8bc2
-
SSDEEP
768:NW8vEciBIdo109NL3R9dUTpwtFN4M/scPFzDIRrzMC:kciBd+9B3BUytFN4ZctQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edb850f50e6eb6aecdc5a63e8dfb7374_JaffaCakes118
Files
-
edb850f50e6eb6aecdc5a63e8dfb7374_JaffaCakes118.exe windows:4 windows x86 arch:x86
b50700abde438ce550ab87cb7b5c77db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetTimeFormatW
GetPrivateProfileSectionNamesA
GetEnvironmentStringsA
GetSystemDirectoryA
CompareStringA
OpenSemaphoreW
CopyFileW
MoveFileWithProgressW
GetProfileSectionW
SetDefaultCommConfigA
CallNamedPipeA
GetFileAttributesA
EnumResourceNamesW
user32
RegisterDeviceNotificationA
VkKeyScanExA
SetWindowLongA
DlgDirListA
DdeCreateStringHandleA
gdi32
GetEnhMetaFileDescriptionA
GetTextExtentPoint32A
AddFontResourceA
EnumICMProfilesW
TextOutA
CreateFontA
Sections
.fasm Size: 30KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ