Static task
static1
Behavioral task
behavioral1
Sample
ea570559428d78978bdae3fe3156be92_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea570559428d78978bdae3fe3156be92_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea570559428d78978bdae3fe3156be92_JaffaCakes118
-
Size
492KB
-
MD5
ea570559428d78978bdae3fe3156be92
-
SHA1
bd9536c771e25e21e6f26d540d700b2d80998a43
-
SHA256
e42aaab929b2a645c6509b03503eff91dc77bd7668a9fdd5d06ef99cbb4e749f
-
SHA512
3ceba2a9ed6d25cbcd5a12f116a091f200ddaa01822748bd008c081ee47a76e51151e5cd42ce569f9f502c52f04cfe0286ddbfc20d9734423036ee8f975ec2e1
-
SSDEEP
12288:zoQo35HUz7rpRGSWRnp7pWS8xQMCnMY6mpAe83T1IoZq:zw50zUFfUCB62f83+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea570559428d78978bdae3fe3156be92_JaffaCakes118
Files
-
ea570559428d78978bdae3fe3156be92_JaffaCakes118.exe windows:7 windows x86 arch:x86
5cafff5cad9645b73665025cfcf3a280
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetProcessHeap
LocalAlloc
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
SetEvent
SetEvent
GetCurrentProcess
GetModuleHandleA
QueryPerformanceCounter
GetACP
MultiByteToWideChar
GetACP
FormatMessageW
GetCommandLineW
SetEvent
SetUnhandledExceptionFilter
FormatMessageW
GetCommandLineA
FormatMessageW
MultiByteToWideChar
GetModuleHandleW
GetProcessHeap
GetCommandLineW
WaitForSingleObject
GetTickCount
GetTickCount
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcess
GetCurrentProcessId
GetACP
LocalFree
GetCurrentThreadId
SetEvent
GetTickCount
GetModuleFileNameA
GetCurrentProcessId
LocalFree
GetModuleFileNameA
WaitForSingleObject
GetProcessHeap
GetACP
GetProcessHeap
SetUnhandledExceptionFilter
GetModuleFileNameA
SetUnhandledExceptionFilter
WaitForSingleObject
GetModuleFileNameA
GetCommandLineW
GetModuleHandleW
GetCommandLineW
GetCurrentThreadId
GetModuleFileNameA
WaitForSingleObject
GetProcessHeap
GetModuleHandleA
GetCurrentProcess
MultiByteToWideChar
LocalAlloc
GetModuleHandleA
GetModuleHandleA
VirtualAlloc
GetModuleFileNameA
GetModuleHandleW
SetUnhandledExceptionFilter
GetACP
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetModuleHandleW
GetACP
GetCommandLineW
user32
GetMessageW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 467KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ