Static task
static1
Behavioral task
behavioral1
Sample
e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118
-
Size
122KB
-
MD5
e21a1321e8dc90e2cbfcebea48458f55
-
SHA1
2d0bd27f423c01f5e6f12d72c65f130dadd872b8
-
SHA256
237b6f573398fb8ef734d75f984eaf96b8320aec860697fb17a75d9f33447d4d
-
SHA512
365bef6e1ab899f35fb5367f9114edf500a1ea5ea44fc1403081f52ab4e71a1e4f61edf31fde5ed200bfce62b29dfce719cf5ba3ac4ca1161893ab3809573f0c
-
SSDEEP
1536:f+Uo88pEwXQYU36N8cnfP4+Dc6fmjkbnMMziZ4BrRwM2DQ8Im:mUoTE8636N8co6fm4A43BriQ8Im
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118
Files
-
e21a1321e8dc90e2cbfcebea48458f55_JaffaCakes118.exe windows:4 windows x86 arch:x86
af655c81779e61e569acc7abe8aeaeb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CompareStringA
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetCurrentDirectoryA
GetFileSize
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetProcessHeap
GetStdHandle
GetTickCount
GetVersion
HeapAlloc
HeapFree
MultiByteToWideChar
ReadFile
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleWindowInfo
SetEvent
SetFilePointer
SetLastError
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile
user32
GetMessageA
PostThreadMessageA
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 186KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE