Static task
static1
Behavioral task
behavioral1
Sample
14eb9e749fa5422b672220c921e020b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14eb9e749fa5422b672220c921e020b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14eb9e749fa5422b672220c921e020b7_JaffaCakes118
-
Size
104KB
-
MD5
14eb9e749fa5422b672220c921e020b7
-
SHA1
94eee12b5d1f076501940260e8e4b2845fab44e2
-
SHA256
be3337503c6e3e0a0996591dfbfc395bd0f7c68fe8b096e0d40e2ab38b0b91df
-
SHA512
7727d900e8f98a1ad8e3df1edbb31447ba62c9683d61836d07d5a354348bed35d152bf8eca14098f4bd3925111905291d29ca154a606c8057dadadc1e455bab9
-
SSDEEP
1536:GvkKvZ1NoYfMwDF8vvM9Sfz3r8YgxbWriXgdNb6vuTmMt83hw/+ob:GLvZ1NoY9t9Sfz78VbDg/428I+ob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14eb9e749fa5422b672220c921e020b7_JaffaCakes118
Files
-
14eb9e749fa5422b672220c921e020b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e29dd972e94c7834ae78990e0ded1cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetProcAddress
GetVersion
GetModuleHandleA
LoadLibraryW
QueryPerformanceCounter
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
lstrcmpiA
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
CreateFileA
SetFilePointer
TlsAlloc
VirtualAlloc
DeviceIoControl
HeapReAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeW
user32
PostQuitMessage
EndPaint
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
RegisterClassExA
LoadCursorA
GetSysColorBrush
GetSystemMetrics
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
DestroyWindow
FindWindowA
BeginPaint
gdi32
CreateBitmap
Rectangle
advapi32
RegOpenKeyExA
RegCloseKey
Sections
JIMMP1 Size: 4KB - Virtual size: 450B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
JIMMP2 Size: 4KB - Virtual size: 513B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
JIMMP3 Size: 4KB - Virtual size: 151B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ