Static task
static1
Behavioral task
behavioral1
Sample
e15371e719a0ffcfa697e3b28e6efebe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e15371e719a0ffcfa697e3b28e6efebe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e15371e719a0ffcfa697e3b28e6efebe_JaffaCakes118
-
Size
170KB
-
MD5
e15371e719a0ffcfa697e3b28e6efebe
-
SHA1
06520be3d60b0192a6425ecdea128b4055e55796
-
SHA256
653bfc86af135fd29b0135088bba0a050e34e5bb5a18ca916f19a588d9a7dc4f
-
SHA512
82b5fe5b4b4cac5db44d6db15a8c5592edfee7ead491ca69a2737cac96706ef456de3f5a8614585887bfabcdffcd5601f0a246d56140d92b8e17b3936d11ec87
-
SSDEEP
3072:2WqtjXtPiTVS2OdAe8cvxWM8bm+G/QET4Xm1vOwsjc5GxKpFyIIgVYZQNJ88Cq38:2jpPESeeJ5jvQ0om1vMjXxKpZIgxO8K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e15371e719a0ffcfa697e3b28e6efebe_JaffaCakes118
Files
-
e15371e719a0ffcfa697e3b28e6efebe_JaffaCakes118.exe windows:4 windows x86 arch:x86
8441ad10202778c4dfa96010d8d05c79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
TlsGetValue
GetACP
GetAtomNameA
MultiByteToWideChar
HeapReAlloc
WriteConsoleA
GetLocaleInfoA
TlsAlloc
HeapSize
GetCPInfo
EnumResourceTypesA
GetOEMCP
TlsSetValue
IsValidCodePage
CreateToolhelp32Snapshot
RtlUnwind
GetConsoleOutputCP
VirtualAlloc
GetTimeFormatA
SetStdHandle
SetFilePointer
RaiseException
shell32
SHGetUnreadMailCountW
DragAcceptFiles
SHAppBarMessage
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
SHGetFileInfoA
Shell_NotifyIconA
rpcrt4
RpcStringFreeA
user32
DispatchMessageW
DispatchMessageA
MessageBoxA
CharNextA
PeekMessageA
LoadStringA
GetDesktopWindow
wsprintfA
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ