Static task
static1
Behavioral task
behavioral1
Sample
e0637f14bdc3c3d517516e58526af7cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0637f14bdc3c3d517516e58526af7cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0637f14bdc3c3d517516e58526af7cd_JaffaCakes118
-
Size
170KB
-
MD5
e0637f14bdc3c3d517516e58526af7cd
-
SHA1
f8b0dbef75390c394501249ce87c562d209e1992
-
SHA256
95d235a8ce0a8b575eb7de6587ed3539e4ac75474c68b996e127c666c999ddfa
-
SHA512
0e2e87a7b4e6cc57f4a8a1d48e97fdf8957d002fef9b7a1d448b091548c11aef35d6c41e645cd3d226f7595d36730dad25d2bbec4566e78a8d0af4138a3d39cb
-
SSDEEP
3072:HaBgTYRj9aFLnynLpLhMkqNwLsHzJHkhQMZuVtX+:HaB8YRJQQLpLhMkqNwLsHzJHkhQttX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0637f14bdc3c3d517516e58526af7cd_JaffaCakes118
Files
-
e0637f14bdc3c3d517516e58526af7cd_JaffaCakes118.exe windows:1 windows x86 arch:x86
c4b40257a1c2e15b87c7c1284c35d527
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindResourceA
GetCommandLineA
GetCurrentProcessId
GetFileTime
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetVersionExA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
OpenEventA
OpenProcess
RtlMoveMemory
SetEvent
SetFileTime
SetLastError
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
Sections
AUTO Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE