Static task
static1
Behavioral task
behavioral1
Sample
e53942dfcdafc1c23237836a35aa94f5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e53942dfcdafc1c23237836a35aa94f5_JaffaCakes118
-
Size
404KB
-
MD5
e53942dfcdafc1c23237836a35aa94f5
-
SHA1
40f7a660800e98eeaf627467a2ad1f1470ba5a38
-
SHA256
80c7d8b0a799527e2e15dd53e2450b412416cecf38abd649763891b53036defa
-
SHA512
1a6e4e180aaf57c464488c6a720ae99c3c7ddd5949e5084492b38ddeff4511906984876931bb20c12afbf8b5b3bc8cccec6b7eb09a90fe310f8d4dd7bbca5dc1
-
SSDEEP
6144:lqVEX2EKsHif4zznxNNXdA5TyKuIEkGMDZSaThHLYfnLseXyFDUOqsfV:cV42uCOzv23uliDZSqhrYDENb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e53942dfcdafc1c23237836a35aa94f5_JaffaCakes118
Files
-
e53942dfcdafc1c23237836a35aa94f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
7439c59acf204585d46a9a5a639d8544
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
WaitForSingleObject
CreateThread
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ