Static task
static1
Behavioral task
behavioral1
Sample
ea88f4769c91f5a2a665501c73514035_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea88f4769c91f5a2a665501c73514035_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea88f4769c91f5a2a665501c73514035_JaffaCakes118
-
Size
286KB
-
MD5
ea88f4769c91f5a2a665501c73514035
-
SHA1
4a361334bce3474527a9b008c1477a12961a2c33
-
SHA256
25f865bb23001c1943e4f2a78ae2cf88223f690f9f92e3c58ce6c589567a6028
-
SHA512
7ecf93ef68c7f2c61064948be96abac23a264dec6a9cedd804e8754308a949743073f9c40733f97df37a763c16828f50b10028bb1b8920b4f6ca241d0a3d51dc
-
SSDEEP
6144:XN2Z2IcHWRPcI4Cg2DsxB1rVGPnFoHJzm6PUYLqdd:XoZfxloB1r0tOzmARKd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea88f4769c91f5a2a665501c73514035_JaffaCakes118
Files
-
ea88f4769c91f5a2a665501c73514035_JaffaCakes118.exe windows:5 windows x86 arch:x86
1bcbb984a5e7fcadeab246871367b029
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
IsCharAlphaA
SetWindowTextA
GetDesktopWindow
DialogBoxParamA
GetActiveWindow
SetWindowTextW
SetDlgItemTextW
ole32
CoRevokeClassObject
comctl32
InitCommonControlsEx
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
kernel32
GetNumberOfConsoleMouseButtons
LoadResource
HeapFree
InitializeCriticalSection
SetFileAttributesA
GetDateFormatA
HeapDestroy
FindResourceA
ExitProcess
GetTickCount
GetProcAddress
FreeLibrary
LoadLibraryA
HeapCreate
LocalFree
IsBadReadPtr
LocalAlloc
DeleteCriticalSection
Sections
.text Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ