Static task
static1
Behavioral task
behavioral1
Sample
e9c464c488dd22f18e6fe409c5cab2aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9c464c488dd22f18e6fe409c5cab2aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9c464c488dd22f18e6fe409c5cab2aa_JaffaCakes118
-
Size
116KB
-
MD5
e9c464c488dd22f18e6fe409c5cab2aa
-
SHA1
53a7be15e9a2b7ec74d593bd192bbf8407bfcea4
-
SHA256
bfe3a4c64f60f44b2737231b2dac880e0ad4682f705ca353a4c1bd1b2039b4da
-
SHA512
d893ee1925729f603f4d9eac4ea73af7b89d97ebcb8edda123b929a50fb416a3d68f7d9297c538bd75c2ab09497dfc6d66a8c288bf78fd9fb5f1cee4d1b71ad8
-
SSDEEP
1536:VevdPa4bebvynduQRBp0jXCwK6G71FuvljAvhWmFM8TTLyqgyNmekyApRlZFzlpk:8YynCCw9IElexCleZ8lzlUlQw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9c464c488dd22f18e6fe409c5cab2aa_JaffaCakes118
Files
-
e9c464c488dd22f18e6fe409c5cab2aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
a55930e585b24247c94eecd795841617
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
GetCPInfo
HeapFree
HeapAlloc
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
VirtualProtect
GetSystemInfo
VirtualQuery
InterlockedExchange
GetACP
GetOEMCP
GetLocaleInfoW
SetStdHandle
ReadFile
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ