Static task
static1
Behavioral task
behavioral1
Sample
e0cbb8fd21c90b3e4b0c9eb673ee6fab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0cbb8fd21c90b3e4b0c9eb673ee6fab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0cbb8fd21c90b3e4b0c9eb673ee6fab_JaffaCakes118
-
Size
480KB
-
MD5
e0cbb8fd21c90b3e4b0c9eb673ee6fab
-
SHA1
17b2e6bd78465d7c4c6bd17445b707e2277972a8
-
SHA256
96081d246a11a8f373887e34f94947a184b5ca2224a73edb84c332f126de7c1c
-
SHA512
8719e42542130bd199c230dc594d58ac3ea144c3d06e4495156df4d96efeaf1d057c5d93eb847a54d1422481d47effbaefd8e41b716017325c1d78370cf5f4e5
-
SSDEEP
12288:RD7grvXwYAAHJxdvZANo027/gT/+oCFVCZDFG8nDDUxsFYFHUj:RkAjuph8oN7m2ooAXUxsmF0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0cbb8fd21c90b3e4b0c9eb673ee6fab_JaffaCakes118
Files
-
e0cbb8fd21c90b3e4b0c9eb673ee6fab_JaffaCakes118.exe windows:4 windows x86 arch:x86
e5217af7b2d2a231809c041f3d0725ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
DeleteDC
GetStockObject
SetTextColor
GetDeviceCaps
SetBkColor
kernel32
LeaveCriticalSection
SetLastError
FindClose
VirtualFree
UnmapViewOfFile
CompareStringA
WriteFile
ReadFile
WideCharToMultiByte
CompareStringW
GetCommandLineA
UnhandledExceptionFilter
LocalAlloc
GetConsoleMode
GetEnvironmentStrings
DeleteCriticalSection
CreateProcessW
GetVersionExA
GetModuleFileNameA
FlushFileBuffers
GlobalUnlock
IsDebuggerPresent
LCMapStringA
GetModuleFileNameW
GetLastError
HeapAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringW
user32
DestroyWindow
DispatchMessageA
GetClientRect
LoadCursorA
GetSubMenu
RegisterClassA
GetSystemMetrics
LoadStringA
ReleaseDC
GetCursorPos
ReleaseCapture
EnableWindow
IsWindow
KillTimer
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 416KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ