Static task
static1
Behavioral task
behavioral1
Sample
e9e0933ac88f553d89ddd8471323fdfb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9e0933ac88f553d89ddd8471323fdfb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9e0933ac88f553d89ddd8471323fdfb_JaffaCakes118
-
Size
3.1MB
-
MD5
e9e0933ac88f553d89ddd8471323fdfb
-
SHA1
6dc8b0f54d2c107dd21d5f11729784464a5061c7
-
SHA256
683d4f5cb51c39e5cfb4d104c91713a3789a95dd0518a2545ccce7ecbd842c18
-
SHA512
b75be1e7404fb119e538a24258f329e81f75a3856e6501a6058a485f2ee6293e8e1900423f93156e6d6ad439e4c3a835ebc543e5686b97eeacb681e46468b795
-
SSDEEP
24576:pQW02Wi92rGCQ8j3uPpcutZc5pv5ndNR3FmqA/FJI9RRVKLsLg:TPYGCQSZXBnbj0Dj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e0933ac88f553d89ddd8471323fdfb_JaffaCakes118
Files
-
e9e0933ac88f553d89ddd8471323fdfb_JaffaCakes118.exe windows:5 windows x86 arch:x86
962f2a592494a28c82ec08f2047dfe89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThreadId
GetLastError
CloseHandle
MulDiv
SystemTimeToFileTime
TlsFree
CreateMutexW
CreateFileMappingW
GetCommandLineW
GetFullPathNameW
CreateFileW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
user32
TranslateMessage
GetClassInfoW
IsChild
IsIconic
CharPrevW
ReleaseCapture
GetSubMenu
BeginPaint
SetWindowRgn
GetScrollRange
GetCursor
GetSysColorBrush
UnionRect
FindWindowW
LoadCursorW
IsDialogMessageW
GetScrollInfo
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 64.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ