Static task
static1
Behavioral task
behavioral1
Sample
e20498717eb54eb8994093db82006ace_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e20498717eb54eb8994093db82006ace_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e20498717eb54eb8994093db82006ace_JaffaCakes118
-
Size
156KB
-
MD5
e20498717eb54eb8994093db82006ace
-
SHA1
8302863a14fc177b4ef464b2530496ded6f17297
-
SHA256
de0c6c585d6adfae34ad1c74ebd2f3a14a705b03631acb5ad8a31d7873424ac0
-
SHA512
9932361c06952f3d828412dfac676ca2459b688444968ca5659d97d5dcd38c52a1ecd5fcc8c12a30bb2516785c7b00a1441d029a9df309502763e89f563b06ba
-
SSDEEP
3072:J+QRX+9FCEvGGPL3YgiLdCPcPKwWQIeovQG/qtLqhHz5THWkaDt9:J+kunIgKSrQZov3/qteh9THWZp9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e20498717eb54eb8994093db82006ace_JaffaCakes118
Files
-
e20498717eb54eb8994093db82006ace_JaffaCakes118.exe windows:4 windows x86 arch:x86
740ebb77967377620d2647c52c13a356
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
user32
SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA
advapi32
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegSetValueA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyA
Sections
.text Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ