Static task
static1
Behavioral task
behavioral1
Sample
e0ffe7c08bc32539ef316d2aa05aa321_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0ffe7c08bc32539ef316d2aa05aa321_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0ffe7c08bc32539ef316d2aa05aa321_JaffaCakes118
-
Size
24KB
-
MD5
e0ffe7c08bc32539ef316d2aa05aa321
-
SHA1
2f0f33a5fb0172f532d0cbc2857430d65f55bb90
-
SHA256
fb6422cde635264ea10b1749b356608f68a1c8c2d35b6585a883bf6401a73aad
-
SHA512
e569c0cfcf2557aa4a9387820833e3f8118d5aee685251a694543806cfbffc3b55aca21c65ea4f9e9c8c4334ce8c7370dbf95861b554c73e81244e261d2dc7c5
-
SSDEEP
384:3da7TdVG/8rjgmQ9NefyAwRovE/dpXQoPNAvfEz0q4Ok76dV8:NUPa8nRQ9NefyrSviFPN2GOOa6A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0ffe7c08bc32539ef316d2aa05aa321_JaffaCakes118
Files
-
e0ffe7c08bc32539ef316d2aa05aa321_JaffaCakes118.exe windows:1 windows x86 arch:x86
756ea1c7bf8120bc6cc377b5a78a708f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
ole32
CoUninitialize
CoInitialize
CoCreateInstance
kernel32
ExitProcess
GetVersion
GetFileSize
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
VirtualFree
MoveFileExA
ReadFile
Sleep
VirtualAlloc
GetLocalTime
WriteConsoleA
WriteFile
CloseHandle
sfc
SfcIsFileProtected
advapi32
RegOpenKeyA
RegCloseKey
RegEnumValueA
imagehlp
CheckSumMappedFile
shell32
ShellExecuteA
user32
CharToOemA
Sections
CODE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ