Static task
static1
Behavioral task
behavioral1
Sample
0e58e8007cbd9ef89d53a8f52f5fd252_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e58e8007cbd9ef89d53a8f52f5fd252_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e58e8007cbd9ef89d53a8f52f5fd252_JaffaCakes118
-
Size
18KB
-
MD5
0e58e8007cbd9ef89d53a8f52f5fd252
-
SHA1
28adfa6c7f0f93e45b203edabf5191eb67f273a8
-
SHA256
c88698155e4784b80a60c6791ea69e7e2360095c94489c6486559611c2c9e533
-
SHA512
6e34300c7f3676d20d282a820921b32787fc62c0d1cd8ad15e1ef044d72fa3e053018c2413394a91f95f2922bcce8c7ab07644f7b39067078f9a75c6583dc76c
-
SSDEEP
384:yCSGFVgIJx/aucV7O2YeNWrHrHWdetoer9SSqK/rWy6PzXc01juVl+:dSGHgIJx/5ccNrTWCSSDaXdF+l+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e58e8007cbd9ef89d53a8f52f5fd252_JaffaCakes118
Files
-
0e58e8007cbd9ef89d53a8f52f5fd252_JaffaCakes118.exe windows:4 windows x86 arch:x86
726d8d1c60f1bc7886cc17405454c41f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__commode
_controlfp
_except_handler3
__p__fmode
_initterm
_adjust_fdiv
__setusermatherr
exit
__getmainargs
__p__acmdln
malloc
free
_XcptFilter
_exit
sprintf
kernel32
GetFileSize
GetStartupInfoA
GetModuleHandleA
CloseHandle
MoveFileExA
CreateFileA
LocalLock
LocalUnlock
LocalAlloc
GetProcAddress
GetModuleHandleW
LocalFree
GetModuleFileNameA
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
user32
SetForegroundWindow
DestroyWindow
MoveWindow
GetWindowRect
GetDesktopWindow
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadIconA
LoadStringA
MessageBoxA
DefWindowProcA
BringWindowToTop
OpenIcon
IsIconic
GetLastActivePopup
FindWindowA
wsprintfA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ