Static task
static1
Behavioral task
behavioral1
Sample
ce0ded1c5643dff5a2d1f10a7ba9b1e5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce0ded1c5643dff5a2d1f10a7ba9b1e5_JaffaCakes118
-
Size
98KB
-
MD5
ce0ded1c5643dff5a2d1f10a7ba9b1e5
-
SHA1
ecb30eb543a0f73c60029d5cdf9a22a78b5a7435
-
SHA256
b38392826039aa1274a8dae6f9b30011f966f622d3fda5ecd9c2c6bdf7503ceb
-
SHA512
cad7124d5db458a8abc74ccd539611db30e0c941b96a7b5fc1871a9df0950b7ea1fd8efa40eb8a133eabd316b989a47fc12f03f05eda8d550bc6c18133ff4369
-
SSDEEP
3072:nHuXgUxmBnvnFNNM6wkjVXcIjU4wisxEbCT:HuwUgtNiDkjVXcQU402CT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce0ded1c5643dff5a2d1f10a7ba9b1e5_JaffaCakes118
Files
-
ce0ded1c5643dff5a2d1f10a7ba9b1e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c568620d25b6ef3ddbc65a4a08606825
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
GetConsoleMode
SetConsoleMode
SetConsoleCursorPosition
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
GetVersionExA
ReadConsoleInputA
ScrollConsoleScreenBufferA
WriteConsoleOutputA
CreateFileA
GetLastError
Sleep
GetStdHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.2data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE