Static task
static1
Behavioral task
behavioral1
Sample
ec0cbf86f32ccd07b8a0de62dbeb0ce6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ec0cbf86f32ccd07b8a0de62dbeb0ce6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec0cbf86f32ccd07b8a0de62dbeb0ce6_JaffaCakes118
-
Size
636KB
-
MD5
ec0cbf86f32ccd07b8a0de62dbeb0ce6
-
SHA1
5039d4b51a82cc09458a2e98ac995f53dbccb067
-
SHA256
c222174dcd9119b0ba9b416d17c021c5fc8b61190936ef6d84b52b4d2799c97c
-
SHA512
e352a78779716b4ccb4eef1feda6a741a99969a43cf33f58b50d1e57424ea9ba49c12b27d7c242fa8bbb5b872fef1a4798f11183c729c19a7c63b51d9e8a596a
-
SSDEEP
12288:fAeFV4TULyn6WjrUpDLeswTzKuQ0Snf2ulV65CVJqP5:V4T6ArU5Lo6Ou+uJqx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec0cbf86f32ccd07b8a0de62dbeb0ce6_JaffaCakes118
Files
-
ec0cbf86f32ccd07b8a0de62dbeb0ce6_JaffaCakes118.exe windows:4 windows x86 arch:x86
c757e95fd88633a27b555c179aee83b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
GetStdHandle
SuspendThread
HeapCreate
GetAtomNameA
LoadLibraryExA
GetModuleHandleA
HeapReAlloc
lstrlenA
CloseHandle
GetCommandLineA
GetVersion
WaitForMultipleObjects
SetConsoleCP
GetTickCount
CompareFileTime
GetConsoleCP
InterlockedExchange
GlobalUnlock
VirtualProtect
WaitForSingleObject
user32
DragDetect
FillRect
DialogBoxParamA
CreateIcon
GetCursorInfo
DragObject
FindWindowA
DrawCaption
DispatchMessageA
DestroyMenu
CreateMenu
IsDialogMessage
GetDlgItem
InvertRect
SetWindowPos
InsertMenuA
SetPropA
SetScrollInfo
GetKeyState
GetKeyboardLayout
winmm
CloseDriver
PlaySoundA
OpenDriver
auxSetVolume
auxGetVolume
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ