Static task
static1
Behavioral task
behavioral1
Sample
e25c2d7a8ca697f5f841bc67a115e156_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e25c2d7a8ca697f5f841bc67a115e156_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e25c2d7a8ca697f5f841bc67a115e156_JaffaCakes118
-
Size
319KB
-
MD5
e25c2d7a8ca697f5f841bc67a115e156
-
SHA1
863918ed3c9e76ad1c5d02870e8ce1d3adfeb09e
-
SHA256
a724ddd984869399a1c4af26d70ef930421b196376cc499919af618bdd808a44
-
SHA512
1c95e3a4c375b3ad4d313eadb60f14ddc82cb3aa93f4f05364d305e7437fc3bfd2ac51c90e9000b5111f3700a31d311804b75e31d945a97f7779899057f0654d
-
SSDEEP
6144:hP7SM9tEgl6kb8q6d248LaVsRMc4N5QLJXs5GedToQl:hjegv6g48L1Mc4N5Q+dNF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25c2d7a8ca697f5f841bc67a115e156_JaffaCakes118
Files
-
e25c2d7a8ca697f5f841bc67a115e156_JaffaCakes118.exe windows:4 windows x86 arch:x86
92112eaca22d550bbab8bed6a61c7bf0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
VirtualFree
Sleep
GetLastError
CloseHandle
WriteFile
GetExitCodeThread
OpenFile
ResetEvent
VirtualUnlock
VirtualLock
GetCurrentProcess
GetModuleHandleA
GetSystemDirectoryA
GetTempFileNameA
GetProcAddress
CreateEventA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentProcessId
VirtualAlloc
VirtualQuery
OpenMutexA
RtlUnwind
LoadLibraryA
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
TerminateThread
GetTickCount
QueryPerformanceCounter
ExitProcess
user32
CreateWindowExA
EnumWindows
IsWindowVisible
IsChild
SetTimer
InSendMessage
gdi32
SelectObject
advapi32
OpenProcessToken
ole32
CoUninitialize
psapi
GetModuleInformation
msvfw32
ICCompressorFree
DrawDibClose
DrawDibBegin
avifil32
AVIFileInfoA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ