Static task
static1
Behavioral task
behavioral1
Sample
e0c09027356b56ca752ab3e2def9b3a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0c09027356b56ca752ab3e2def9b3a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0c09027356b56ca752ab3e2def9b3a9_JaffaCakes118
-
Size
445KB
-
MD5
e0c09027356b56ca752ab3e2def9b3a9
-
SHA1
87c028cb36e43cbb6732b415eff336364784ac2a
-
SHA256
af88ddd160bfb5f0538348f696d02f1b7153f82ec12039e5c66495a9234219d1
-
SHA512
91cc1836910b36f211fcaa00f405231080b6456aed1b962700776fb0700e38748934fe89303fed1e6ff6e6899b3c70fdb770984fc5e14c09ec04940393e5309d
-
SSDEEP
6144:AmgWccNXAVvoUheFuNZ0Bp36FucTGvegiUItufTPSpoNgC8+Pb8x+osGe:3gjoXooU7ZmpKFu6AegiUIwbPccNss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c09027356b56ca752ab3e2def9b3a9_JaffaCakes118
Files
-
e0c09027356b56ca752ab3e2def9b3a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
d02bd4e93be4462254a2c7546258d9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetFileSize
GlobalFree
LocalAlloc
CreateFileMappingA
WriteFile
GlobalAlloc
Sleep
FindClose
FindNextFileA
FreeLibrary
EndUpdateResourceA
UpdateResourceA
SizeofResource
BeginUpdateResourceA
LockResource
LoadResource
ResumeThread
CopyFileA
FreeResource
VirtualProtect
GetProcAddress
SetLastError
GetStringTypeW
GetTempPathA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetStdHandle
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapFree
VirtualAlloc
GetModuleHandleA
MapViewOfFile
FlushViewOfFile
GetLastError
CreateFileA
ReadFile
CloseHandle
CreateMutexA
HeapAlloc
GetStringTypeA
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
user32
LoadStringA
DefWindowProcA
GetClientRect
CreateWindowExA
ShowWindow
MoveWindow
GetWindowLongA
UpdateWindow
LoadCursorA
RegisterClassExA
GetIconInfo
DrawIcon
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CopyImage
LoadAcceleratorsA
IsWindow
IsWindowVisible
LoadIconA
ReleaseDC
DestroyIcon
CreateDialogParamA
EndDialog
GetDC
gdi32
GetDIBits
GetObjectA
CreateDCA
GetDeviceCaps
CreateSolidBrush
CreatePen
Rectangle
DeleteObject
SelectObject
EnumObjects
CreateCompatibleBitmap
ole32
CoUninitialize
CoInitialize
pdh
PdhAddCounterA
PdhOpenQueryA
PdhCollectQueryData
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 196KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.msl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ