Static task
static1
Behavioral task
behavioral1
Sample
e0fa6da7b26482a3cbd0cb0d01735ae9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0fa6da7b26482a3cbd0cb0d01735ae9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0fa6da7b26482a3cbd0cb0d01735ae9_JaffaCakes118
-
Size
24KB
-
MD5
e0fa6da7b26482a3cbd0cb0d01735ae9
-
SHA1
91bed32489fa9c7e4b5f107329d7bb8dbd680ac9
-
SHA256
c0c13a1202175eea8456e8e702028043642af50b6c81a243743e860b2d4f6b08
-
SHA512
127843d0d4c47cf7e9799729cea2c49facf2cb4179fc3361e4ff1c442fc38dd57fdc139249275105b5e44ca4838c75d300460eb94578322a7d4484cd1779c316
-
SSDEEP
384:XCR3NkU3lT5KRKLuJUjD+kq2+DQ33+y5/zEaIB9XbxQs6zrFu:Sf3lCwuEBqn833+ym1ms
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0fa6da7b26482a3cbd0cb0d01735ae9_JaffaCakes118
Files
-
e0fa6da7b26482a3cbd0cb0d01735ae9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d628a2833bee87a5024420a50f5ce69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetCommBreak
GetStdHandle
GetProfileStringA
GlobalFree
GlobalAddAtomA
LoadLibraryExA
GlobalFindAtomA
LocalSize
GetOEMCP
GlobalCompact
RaiseException
GetProcessHeap
DeleteAtom
LoadResource
EnterCriticalSection
ExitThread
GetCommState
GlobalLock
lstrcpyn
VirtualAlloc
user32
GetParent
EndPaint
ValidateRect
AlignRects
GetForegroundWindow
GetActiveWindow
GetFocus
ReleaseDC
ShowWindow
GetWindowTextA
GetClassNameA
IsIconic
BeginPaint
GetClassInfoExA
GetWindow
GetDC
GetWindowTextLengthA
DrawEdge
CloseWindow
wsock32
WSAStartup
WSASetBlockingHook
WSAGetLastError
WSAAsyncGetServByPort
WSACleanup
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ