Static task
static1
Behavioral task
behavioral1
Sample
e3c52c6466e29e89253c95f237c4eade_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3c52c6466e29e89253c95f237c4eade_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e3c52c6466e29e89253c95f237c4eade_JaffaCakes118
-
Size
116KB
-
MD5
e3c52c6466e29e89253c95f237c4eade
-
SHA1
742f56a4d00a7743676786624a2f33c99d9873a3
-
SHA256
47cc76222cc19a24d447dd5ab1ec6c57c164c6be61219e768ac518530862edb1
-
SHA512
e70e332d7b572405db91a5cdda11bdadbcc29ecf69dd6785561053c8e3f42373c5fe6a24c42167f21ac54f65fe1774514b46113175faf1bcd0c9f14a6aa2a4a3
-
SSDEEP
1536:AIxbpGcQSuxstmL2lYg5H4uVvybu3YZ3OR5xXBYI4+s/EEwOCN:AUbpJQ1stmLgY0i/YXt4+s/M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3c52c6466e29e89253c95f237c4eade_JaffaCakes118
Files
-
e3c52c6466e29e89253c95f237c4eade_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b4ad1f3c40c67631cbfad36402e473d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
SizeofResource
GetModuleFileNameA
CloseHandle
ReadFile
GetFileSize
CreateFileA
EndUpdateResourceA
UpdateResourceA
SetFilePointer
BeginUpdateResourceA
FindResourceA
WriteFile
GetVolumeInformationA
GetEnvironmentVariableA
CreateMutexA
OpenMutexA
GetProcAddress
LoadLibraryA
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetConsoleCtrlHandler
GetLastError
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
user32
LoadIconA
SendMessageA
CheckDlgButton
SetWindowPos
EndDialog
MessageBoxA
GetCursorPos
GetWindowRect
PtInRect
LoadCursorA
SetCursor
IsDlgButtonChecked
GetDlgItem
EnableWindow
DestroyWindow
SetDlgItemTextA
DialogBoxParamA
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ