Static task
static1
Behavioral task
behavioral1
Sample
ea10acb1994f1a0f328eb761a0b34f3f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ea10acb1994f1a0f328eb761a0b34f3f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea10acb1994f1a0f328eb761a0b34f3f_JaffaCakes118
-
Size
91KB
-
MD5
ea10acb1994f1a0f328eb761a0b34f3f
-
SHA1
4b60cae68d43fa5574218c924388e19cad564f89
-
SHA256
1bcbe5bc11105bc8257cc1b1f35a4e7d09e6998e88c94848d6f037cf21e63239
-
SHA512
84e63e5e4e1001bfa806816f133c4f5324ab1baf99856d999cdab09ab5c02987b70b860fac19a99f888cfb3b9cf2473559e31f39e03aa2fbb3591f3a337cce6d
-
SSDEEP
1536:stKRZxRfoMz5DHR+//gcwHKFgWnLcEXX8WsnySq7jaiNgMOtC1:stKRZnfrVDH4/gRKFhnLcEXXLsySqiGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea10acb1994f1a0f328eb761a0b34f3f_JaffaCakes118
Files
-
ea10acb1994f1a0f328eb761a0b34f3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
42e7c14ca48123966bb2bc209b151b7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid
user32
MessageBoxA
MessageBeep
kernel32
CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError
Sections
.text Size: 24KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE