Static task
static1
Behavioral task
behavioral1
Sample
27a2e2a0ee23c0c0d2814d10a3cc3563_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
27a2e2a0ee23c0c0d2814d10a3cc3563_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27a2e2a0ee23c0c0d2814d10a3cc3563_JaffaCakes118
-
Size
121KB
-
MD5
27a2e2a0ee23c0c0d2814d10a3cc3563
-
SHA1
a1aae565c9484becbe61081c639ac12f716d723f
-
SHA256
01b73ad32207f3646b8036223a4dec966c744cf0328ac78e15abd6632cc2a332
-
SHA512
ee9d636d39a2b82bab7989863622a9f2fa6b640bde5ef46994ec92dcb20ffd6065ee3d0add6a112b8e6238c82b16f50d80b5f9030768efabff98b04c603b5dc9
-
SSDEEP
3072:TkKf52nlxCq/IC3r5IGq5hFRZFKX6/QdR5ON1lmSbReH:TkKklx3HJq5NKqI8lm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27a2e2a0ee23c0c0d2814d10a3cc3563_JaffaCakes118
Files
-
27a2e2a0ee23c0c0d2814d10a3cc3563_JaffaCakes118.exe windows:4 windows x86 arch:x86
0ec5f204f5eb9404adb966463ea8ecd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CreateThread
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
IsValidLocale
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQueryEx
msvcrt
fwrite
fseek
strcpy
atol
strncmp
wscanf
user32
RegisterWindowMessageA
GetCapture
DefFrameProcA
GetDesktopWindow
comctl32
ShowHideMenuCtl
InitCommonControls
CreateStatusWindowA
oleaut32
VarWeekdayName
VarI4FromI1
VarI2FromUI4
VarFormat
VarDecDiv
VarCySu
VarCyFromR8
RegisterActiveObject
Sections
.text Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ