Static task
static1
Behavioral task
behavioral1
Sample
e1416145eaa7fe2fb736c7a60e1ccc03_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1416145eaa7fe2fb736c7a60e1ccc03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1416145eaa7fe2fb736c7a60e1ccc03_JaffaCakes118
-
Size
216KB
-
MD5
e1416145eaa7fe2fb736c7a60e1ccc03
-
SHA1
5390f627c1fa199a7e8f2bf9b76ebccd837f2858
-
SHA256
993bbc179cd25d70ca2066545c7202f6740984cf5f15b6dda07ff46d1c264d04
-
SHA512
06ec510ff5fe4e7290276628b72b6d35e8cfab45f7113e153bcd10ef3145e524222b8524f44ec112d220f7fda4483320a1bcb00695827faea03154f3da95f628
-
SSDEEP
1536:jIBpSFEHtY7/jJ6UInXenJMvNDGGe7KDXs5yezsg3FAG0yPzepkkdODt6BEV9Npr:jIn9HtHUuXe65embezstqeykdOMBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1416145eaa7fe2fb736c7a60e1ccc03_JaffaCakes118
Files
-
e1416145eaa7fe2fb736c7a60e1ccc03_JaffaCakes118.exe windows:4 windows x86 arch:x86
8471b68bcc73a77be4d65276025aa510
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
SizeofResource
GetModuleFileNameA
LockResource
LoadResource
FindResourceA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE