Static task
static1
Behavioral task
behavioral1
Sample
e010ec6f74aeb7a88d125e287e3dffc4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e010ec6f74aeb7a88d125e287e3dffc4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e010ec6f74aeb7a88d125e287e3dffc4_JaffaCakes118
-
Size
548KB
-
MD5
e010ec6f74aeb7a88d125e287e3dffc4
-
SHA1
09fa20beb9ba267bc3fb6cdeee34847662e95a15
-
SHA256
8fb528473c6671a4d6e3a4f551bcfc3f3ae30c790b5e77318454ea01ce273577
-
SHA512
24323b6cd7d6d59906dc7e35af628bf1afaabcddec2acb332f91c8c15cfb775da9f338a04ef044db728b24386b82fc8ac2ae0e865503d1274532a959d6c3b0b8
-
SSDEEP
12288:8aRHn0SPCiulCQoy0AiTtbizV1TGmiZMq0guaH:dn0KCipQopjTtYTk0gf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e010ec6f74aeb7a88d125e287e3dffc4_JaffaCakes118
Files
-
e010ec6f74aeb7a88d125e287e3dffc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
c63a6957abe5ec9d5cfcc8318557b98b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetEnvironmentStringsW
SetHandleCount
GetLocaleInfoW
LeaveCriticalSection
IsBadReadPtr
TlsFree
ExitProcess
GetDateFormatA
GetCommandLineA
CompareStringA
EnterCriticalSection
GetLastError
SetEnvironmentVariableA
GetCommandLineW
WriteFile
GetFileType
GetProcAddress
GetSystemInfo
GetCurrentThread
HeapReAlloc
VirtualAlloc
MoveFileExA
GetStringTypeA
FlushFileBuffers
HeapDestroy
SetFilePointer
IsValidCodePage
HeapAlloc
TlsAlloc
TerminateProcess
WideCharToMultiByte
GetCurrentProcessId
MultiByteToWideChar
GetSystemTimeAsFileTime
LCMapStringA
EnumResourceNamesW
CreateMutexA
SetConsoleWindowInfo
TlsGetValue
HeapSize
VirtualFree
GetUserDefaultLCID
LCMapStringW
GetLocaleInfoA
VirtualQuery
GetPrivateProfileSectionA
QueryPerformanceCounter
GetOEMCP
GetVersionExA
GetACP
TlsSetValue
EnumSystemLocalesA
WriteConsoleOutputCharacterA
ReadFile
SetLastError
GetCPInfo
GetNamedPipeHandleStateW
GetTickCount
GetModuleFileNameA
GetStartupInfoA
FreeEnvironmentStringsW
InterlockedExchange
GetCurrentProcess
WriteConsoleA
CompareStringW
GetStartupInfoW
FreeEnvironmentStringsA
IsBadWritePtr
InitializeCriticalSection
CommConfigDialogW
GetEnvironmentStrings
SetStdHandle
GetModuleFileNameW
CloseHandle
LoadLibraryA
IsValidLocale
GetVersionExW
UnhandledExceptionFilter
CreateSemaphoreA
HeapCreate
OpenMutexA
RtlUnwind
GetModuleHandleA
DosDateTimeToFileTime
DeleteCriticalSection
GetCurrentThreadId
GetStringTypeExW
VirtualProtect
VirtualUnlock
GetStdHandle
GetTimeFormatA
MapViewOfFile
GetStringTypeW
GetTimeZoneInformation
comctl32
InitCommonControlsEx
comdlg32
ChooseColorW
PrintDlgA
PageSetupDlgA
FindTextA
gdi32
StartDocW
CreateDCW
SelectClipRgn
CreateFontIndirectW
PolyTextOutA
CreateDIBSection
CreatePalette
GetWorldTransform
EndPage
EnumFontFamiliesA
SetICMProfileA
Ellipse
SetWindowExtEx
GetICMProfileW
CreateBitmap
GetDeviceCaps
ExtCreatePen
GetRandomRgn
GetTextCharsetInfo
CreateEnhMetaFileW
WidenPath
GetDeviceGammaRamp
PolyPolyline
CreateCompatibleBitmap
GdiPlayDCScript
user32
RegisterClassA
PostMessageW
TabbedTextOutW
DrawTextExA
RegisterClassExA
GetCaretPos
GetClipboardFormatNameW
IsRectEmpty
InvalidateRgn
wsprintfW
InternalGetWindowText
ScrollWindowEx
TileChildWindows
SetWindowLongW
EnumDesktopsA
IsDialogMessage
DdeQueryConvInfo
SetWindowTextA
GetDlgItem
GetParent
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ