Static task
static1
Behavioral task
behavioral1
Sample
ea1dbcd47c4b3e5940ac90cf9e6a7d55_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ea1dbcd47c4b3e5940ac90cf9e6a7d55_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea1dbcd47c4b3e5940ac90cf9e6a7d55_JaffaCakes118
-
Size
116KB
-
MD5
ea1dbcd47c4b3e5940ac90cf9e6a7d55
-
SHA1
d073ad0ab9ae00242e24bf31667f7eb74d3abcd9
-
SHA256
22e3dbcfe4061f3062955022839df37af2138de6df8f69247d586c2c1add3739
-
SHA512
00b8373bcffae377f6db69aaabc84c994fae639d8fe3def24a2caf5e1ea864a6da5f74448e5544a6058e2aa324459900319a1e3bcddb26eb26891c15ea9193f1
-
SSDEEP
1536:b1RVKscWGlzE09lwdmiZJAP5W/pOz2T+Aa7WuYE3jEEt7EZ:juVwdmiZJAIwRYcE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1dbcd47c4b3e5940ac90cf9e6a7d55_JaffaCakes118
Files
-
ea1dbcd47c4b3e5940ac90cf9e6a7d55_JaffaCakes118.exe windows:4 windows x86 arch:x86
a89d94e840a78b20165a026c3d2ef2dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetPixel
GetClipBox
SetTextColor
CancelDC
GetPixel
GetDCOrgEx
ExcludeClipRect
AddFontResourceA
ClearBrushAttributes
CloseMetaFile
AddFontResourceExA
DeleteObject
RestoreDC
CloseFigure
RestoreDC
GetBrushOrgEx
CloseMetaFile
ExtTextOutA
ClearBitmapAttributes
GetClipBox
DeleteObject
GetPixel
AddFontResourceExA
AddFontResourceExW
AddFontMemResourceEx
BeginPath
CopyMetaFileA
BitBlt
GetPixel
GetClipBox
GetCurrentPositionEx
DeleteDC
CreateSolidBrush
BitBlt
CancelDC
DeleteObject
GetPixel
AbortPath
ExcludeClipRect
AddFontResourceA
GetBrushOrgEx
ClearBitmapAttributes
GetPixel
GetDCOrgEx
user32
EndDialog
InsertMenuA
CalcMenuBar
CopyIcon
IsWindow
CopyImage
CloseWindow
GetMenu
AppendMenuW
LoadMenuA
DialogBoxParamA
GetDlgItem
IsWindow
GetDC
DrawIcon
CloseWindow
LoadMenuA
AlignRects
CopyImage
GetMenu
GetWindowTextA
DrawTextA
LoadCursorA
GetFocus
IsMenu
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ