Static task
static1
Behavioral task
behavioral1
Sample
0e2fb246efed40247b34efe40b83078b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e2fb246efed40247b34efe40b83078b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e2fb246efed40247b34efe40b83078b_JaffaCakes118
-
Size
18KB
-
MD5
0e2fb246efed40247b34efe40b83078b
-
SHA1
a019811c9bcd37ec7e978d62c7f4c6a105a3f284
-
SHA256
2ef5cf1e05806b4ac3a3fa7bb6505e3d64c92ae14878fbab4e167734806d0beb
-
SHA512
767d2dfe1968d5e94be70ed1bb3050d10c3e5af051de9ded7d586849362e1998e8d046ca5f58b542867bcfc7cd224ee7f28fd30b61126cbf01829accfd09ca60
-
SSDEEP
192:+TqQY0Ib2HiMCM0ldlBI28KuuhcQeRFZXQOg++FZEXtBwLbvN7S5bcBWWBhTiEil:+0lFJrlYjuhcQeR83+yY6l7IcBrAEA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e2fb246efed40247b34efe40b83078b_JaffaCakes118
Files
-
0e2fb246efed40247b34efe40b83078b_JaffaCakes118.exe windows:5 windows x86 arch:x86
0c7e83dded3b633afb453021d9d8cf33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualQuery
LoadLibraryExA
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReleaseMutex
GetSystemTime
CreateFileA
CreateMutexA
GetTimeZoneInformation
MapViewOfFile
CreateFileMappingA
CloseHandle
OpenMutexA
GetLastError
VirtualProtect
LoadLibraryA
GetTempPathA
FreeLibrary
GetLocalTime
ExitProcess
LocalFree
FormatMessageA
ReadFile
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
UnregisterClassA
EndDialog
GetActiveWindow
IsWindowEnabled
IsWindowVisible
PeekMessageA
DispatchMessageA
PostQuitMessage
SetFocus
SetWindowTextA
ShowWindow
MessageBoxA
wsprintfA
GetDesktopWindow
PostMessageA
IsWindow
SendMessageA
CreateWindowExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ