Static task
static1
Behavioral task
behavioral1
Sample
e1be5be6bde0fe32a158de83fe3fea6a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1be5be6bde0fe32a158de83fe3fea6a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1be5be6bde0fe32a158de83fe3fea6a_JaffaCakes118
-
Size
21KB
-
MD5
e1be5be6bde0fe32a158de83fe3fea6a
-
SHA1
83cd0f5df99b532f289723dc2c530388b63b9a22
-
SHA256
4a7eccaeed97af4adabc73d76857aa35293902da5bc3093e92186a0d8048ebbb
-
SHA512
bc441233cd079855830fc5895de42b5959c9b3f09eb387220ced18bd57d957da850dcd2de88d204acfbc3235274e671ae7ba6b7907c0141bf9a56ea1f3ac6a39
-
SSDEEP
384:ByyyyyyyyyyyyyyyyEzJVhI4PqZEVffkfmMI1uSGnL6f4PwnKn:ByyyyyyyyyyyyyyyyEzJDIr8fkeMI1/4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1be5be6bde0fe32a158de83fe3fea6a_JaffaCakes118
Files
-
e1be5be6bde0fe32a158de83fe3fea6a_JaffaCakes118.exe windows:12233 windows x86 arch:x86
5e62bc379bd2a282a14dddaec0f8998e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
lstrcpyW
GetCommandLineA
VirtualAlloc
QueryPerformanceCounter
HeapFree
LoadLibraryW
lstrcpyW
DeleteCriticalSection
WideCharToMultiByte
InterlockedIncrement
GetCurrentProcess
GetProcessHeap
SetLastError
UnhandledExceptionFilter
QueryPerformanceCounter
WideCharToMultiByte
CloseHandle
UnhandledExceptionFilter
WideCharToMultiByte
VirtualAlloc
GetACP
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
InterlockedDecrement
GetVersionExA
HeapReAlloc
lstrcpyW
VirtualAlloc
CreateFileW
GetModuleHandleW
FreeLibrary
GetCurrentProcessId
GetModuleHandleA
VirtualFree
SetLastError
Sleep
SetEvent
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
InterlockedDecrement
DeleteCriticalSection
SetUnhandledExceptionFilter
EnterCriticalSection
user32
RegisterClassW
MessageBoxW
BeginPaint
GetKeyState
SetTimer
MessageBeep
RegisterClassExW
OffsetRect
GetSysColor
SendMessageA
RegisterClassW
GetCursorPos
EndDialog
SetWindowLongW
LoadIconW
SetTimer
LoadAcceleratorsW
DestroyWindow
DispatchMessageA
IsIconic
IsDialogMessageW
LoadAcceleratorsW
MessageBeep
PeekMessageW
GetClientRect
EndPaint
CreateDialogParamW
CallWindowProcW
SetForegroundWindow
EndPaint
GetSubMenu
PostQuitMessage
CharNextW
LoadImageW
DestroyMenu
wsprintfA
GetParent
SetCursor
GetDlgItemTextW
GetDesktopWindow
WinHelpW
CallWindowProcW
MessageBoxW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ