Static task
static1
Behavioral task
behavioral1
Sample
e8f830eb20a8a14133d8f47803da804b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e8f830eb20a8a14133d8f47803da804b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e8f830eb20a8a14133d8f47803da804b_JaffaCakes118
-
Size
148KB
-
MD5
e8f830eb20a8a14133d8f47803da804b
-
SHA1
95992d3e02aa03617cd901d6afd71e7d26ef57da
-
SHA256
b76267e5a2717adebdad96573c266a836e51b652005cc82f4c8f6810c2f74637
-
SHA512
ba8e0abdad9bb1360cfc3a8403d037e3c1c9808559b9981f77c2ce13a3e55b14f58cb65196f2b814498dd6f14a5d2d06cacc33970369dbe51c92675b17c01b18
-
SSDEEP
3072:usfqCsfK73x7v1ECCN+dCpVnqVlMK1kuh2yhUBfyc+54fOm+If1:qC73xBwIaVnqVpDhKBl6G+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8f830eb20a8a14133d8f47803da804b_JaffaCakes118
Files
-
e8f830eb20a8a14133d8f47803da804b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b40429684e0fc33d8b52e447a4529c43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
GetExitCodeProcess
GetLastError
ReadConsoleA
GetLocalTime
SetEndOfFile
SetEnvironmentVariableA
GetEnvironmentStrings
SetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
GetFullPathNameA
SetLocalTime
FindClose
GetSystemDefaultLCID
GetCommandLineA
FindFirstFileW
ResumeThread
UnlockFile
GetSystemDefaultLangID
GetModuleFileNameW
LockFile
MultiByteToWideChar
RtlUnwind
GetCurrentDirectoryA
WriteFile
SetEnvironmentVariableW
TlsSetValue
CreateFileW
DeleteCriticalSection
SetFileAttributesW
FindNextFileA
RemoveDirectoryA
GetModuleHandleA
GetDriveTypeA
Beep
FlushFileBuffers
WriteConsoleA
GetUserDefaultLCID
GetDriveTypeW
TlsAlloc
SetErrorMode
IsBadReadPtr
ReadFile
FileTimeToSystemTime
GetCurrentProcess
SetFileTime
SetFileAttributesA
CreateThread
GetModuleFileNameA
GetFullPathNameW
DuplicateHandle
GetCurrentThread
FileTimeToLocalFileTime
GetProcAddress
LoadLibraryW
RemoveDirectoryW
CreatePipe
SetCurrentDirectoryA
GetACP
CloseHandle
TlsGetValue
RaiseException
QueryPerformanceCounter
GetNumberOfConsoleInputEvents
SetCurrentDirectoryW
FindFirstFileA
WaitForSingleObject
GetCurrentDirectoryW
DeleteFileA
GetStdHandle
IsValidCodePage
FreeLibrary
GetFileAttributesA
FindNextFileW
GetConsoleMode
GetFileType
CreateDirectoryA
SetConsoleMode
GetLogicalDrives
LeaveCriticalSection
IsBadWritePtr
CreateFileA
GetDiskFreeSpaceA
SetConsoleCtrlHandler
ReadConsoleInputA
EnterCriticalSection
VirtualFree
GetCPInfo
CreateDirectoryW
LocalFileTimeToFileTime
PeekConsoleInputA
GetFileInformationByHandle
InitializeCriticalSection
SetFilePointer
SystemTimeToFileTime
GetVersion
GetStartupInfoA
GetFileAttributesW
user32
MessageBoxA
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ