Static task
static1
Behavioral task
behavioral1
Sample
e0b2b1f4d3277f5249ed1d028e688c4c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0b2b1f4d3277f5249ed1d028e688c4c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0b2b1f4d3277f5249ed1d028e688c4c_JaffaCakes118
-
Size
238KB
-
MD5
e0b2b1f4d3277f5249ed1d028e688c4c
-
SHA1
dddb3b74cc1e5e6c74920baae53d7a67d35db054
-
SHA256
4675e864bde578bc089fa79aa290c7f95d7a439dad8c83c5b9dfc91556cc320a
-
SHA512
c1ca8a780c98a3b16d5d0a2c086aecbc74cce3d09d405287ef9ef49db86c6ebb54a19a6566fa4163dd5306cdd575c1e71d8de10a1897d9cdeaef5be38bbf6755
-
SSDEEP
3072:ydVuMK8P71MzyrnxJCkaTGWnTkM2Ta33LN:ydsxieUbXaauwT+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0b2b1f4d3277f5249ed1d028e688c4c_JaffaCakes118
Files
-
e0b2b1f4d3277f5249ed1d028e688c4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5a27fddcaf14dc5145828ad9fbd209f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
RestoreDC
GetRgnBox
CreateBrushIndirect
SelectObject
GetClipBox
BitBlt
CopyEnhMetaFileA
GetBitmapBits
user32
MessageBoxA
GetActiveWindow
GetCursor
ole32
StgCreateDocfileOnILockBytes
CoCreateGuid
CoUninitialize
WriteClassStm
StringFromIID
CLSIDFromProgID
OleRegGetUserType
kernel32
MulDiv
GetFileAttributesA
GetProcAddress
GlobalAlloc
GetTickCount
ReadFile
VirtualAlloc
VirtualAllocEx
FindResourceA
GetStdHandle
lstrcmpA
SetLastError
WideCharToMultiByte
ExitThread
GetDiskFreeSpaceA
LoadLibraryA
GetFileType
comctl32
ImageList_GetBkColor
ImageList_Write
ImageList_DragShowNolock
ImageList_Draw
ImageList_Create
ImageList_Read
ImageList_Destroy
ImageList_Add
version
GetFileVersionInfoSizeA
Sections
CODE Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ