Static task
static1
Behavioral task
behavioral1
Sample
e173578fb95721402daa03f0e9230d2a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e173578fb95721402daa03f0e9230d2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e173578fb95721402daa03f0e9230d2a_JaffaCakes118
-
Size
28KB
-
MD5
e173578fb95721402daa03f0e9230d2a
-
SHA1
be1ba562ba34d99ecb08adfb0f35b7843cada6ca
-
SHA256
654b8ef18fcb6d6cae7b6026b3eb8263760c215e08c77eb31277b5beb0aa64f2
-
SHA512
3493d2b62f8a8d2dff07a3764b96f5a6cf1342c1bef45be086482fe6a7551a71be4bcc0b4731bd9526721d68db2f1829dc0c408195e41ea85bf138ab6a030920
-
SSDEEP
768:49KnePYwxbcDpDDlvP3cXDyELTzt3Lm/ybKuynuf:lncvRqP3cXZ7Eo0nuf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e173578fb95721402daa03f0e9230d2a_JaffaCakes118
Files
-
e173578fb95721402daa03f0e9230d2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab20b4b97f99ea00564e368943a1c2be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_CIasin
_mbcasemap
_mbsinc
_mbsnicmp
_mbsncmp
gdi32
BitBlt
CreateColorSpaceW
CreateDIBitmap
CreateICW
CreateMetaFileW
CreatePalette
Sections
.flat Size: 14KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE