Static task
static1
Behavioral task
behavioral1
Sample
e13a41533d29db412b011b2f8cab2eb1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e13a41533d29db412b011b2f8cab2eb1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e13a41533d29db412b011b2f8cab2eb1_JaffaCakes118
-
Size
154KB
-
MD5
e13a41533d29db412b011b2f8cab2eb1
-
SHA1
c04502a1976ed52f1b7d2edb4b13f186ce3d01a3
-
SHA256
918f5cc3f9a42a0076def9a511106a806040985ca5ec9d447524e75a60a39b1a
-
SHA512
2fd147b7a246987d9924579a56b36419fe09f5aa4ad42715b793906c96ee8da57fef1eaf1d9feee0ac52ae9b389ae0a26ce02f6ce349ef07efcf05076e963c3b
-
SSDEEP
3072:QCwq75MfLG88oI+tVj/ZhMDhGtuTgWOvB2koVzBGyvR8JC/AZS+mUH6:Q075kyR+fthQEtkg5Z2kWGy+CYZvLH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e13a41533d29db412b011b2f8cab2eb1_JaffaCakes118
Files
-
e13a41533d29db412b011b2f8cab2eb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7eea03ccff47aa2572c0cccb6a4e12b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetBkColor
GetMapMode
GetTextExtentPoint32W
CreateFontIndirectW
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ole32
CoCreateGuid
StringFromCLSID
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
OleLockRunning
StringFromGUID2
CoAllowSetForegroundWindow
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoGetClassObject
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
shlwapi
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathCombineW
shell32
SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW
comdlg32
GetFileTitleW
kernel32
GetLocaleInfoW
ExpandEnvironmentStringsW
GetCurrentThread
LZCopy
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
oleaut32
OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI4FromDec
SysFreeString
Sections
.text Size: 86KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 322B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ