Static task
static1
Behavioral task
behavioral1
Sample
ec353eb08a882a2b980e09b59158c30d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec353eb08a882a2b980e09b59158c30d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec353eb08a882a2b980e09b59158c30d_JaffaCakes118
-
Size
60KB
-
MD5
ec353eb08a882a2b980e09b59158c30d
-
SHA1
fb32cc2fb4b6bdaacefcf80c0f2f8b24c9516a7e
-
SHA256
2dd154cad24440af28102d6e0126d98ccc1d90e0a005cf3c5c349fdf77085054
-
SHA512
caf05dc24f1eb14f43fce6813a04c15123f809346e2475d14e6676aa1f4288aedc5e0f89e6b937e743412ef77b127342268cb542b9e400d3b5f891387d7d8a9d
-
SSDEEP
1536:IjbL89gNJwxrgmnMi3DyOfvwp2UDLRENF2pEphhB4K2UC:I7AQJUnHeYvu2UHRaFwE52U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec353eb08a882a2b980e09b59158c30d_JaffaCakes118
Files
-
ec353eb08a882a2b980e09b59158c30d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b896edbb6c64ca80ff8f735eca32cfd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFlags
WaitForDebugEvent
SetThreadExecutionState
GetModuleFileNameW
TransactNamedPipe
SetCriticalSectionSpinCount
InvalidateConsoleDIBits
VirtualFreeEx
user32
RegisterClassA
ValidateRect
GetClipboardSequenceNumber
BeginDeferWindowPos
UnlockWindowStation
DefWindowProcA
PostMessageA
DestroyCursor
ShowWindow
GetMenuItemRect
GetLastInputInfo
EnumPropsExW
shell32
StrChrW
StrRStrA
InternalExtractIconListW
Shell_NotifyIcon
ExtractAssociatedIconExW
SHBrowseForFolderW
StrCmpNIW
SHGetNewLinkInfo
StrRStrW
SHBrowseForFolderA
SHGetFileInfo
SHIsFileAvailableOffline
SHLoadNonloadedIconOverlayIdentifiers
gdi32
AbortDoc
GetCharWidthA
CreateDCA
UpdateColors
GdiAlphaBlend
BRUSHOBJ_pvGetRbrush
Sections
CODE Size: 9KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ