Static task
static1
Behavioral task
behavioral1
Sample
eaea017616681b6c6074c1dbe69f6ff4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eaea017616681b6c6074c1dbe69f6ff4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eaea017616681b6c6074c1dbe69f6ff4_JaffaCakes118
-
Size
27KB
-
MD5
eaea017616681b6c6074c1dbe69f6ff4
-
SHA1
93198ceed7a0f762c79df7ad0320ea8db8871aed
-
SHA256
8305f30445fe0b8243498a6bcd78a44aaebd894f6c7955ca654cef2b8e4476fa
-
SHA512
c1c6b04aa25f525c77263dbf1c8b7e5bb7fbcf2c883f33fd04c6ea66f573a090859d219cbb18b827b98aa4b6632a247ebe3fce95ec973adbd509f36b78c6c393
-
SSDEEP
384:l9Lx3GpHRTLSF3EyZAOt9252lCnM/lGakpe9NXDUDM1qjW7PykJPv:z89SF39RtE52kelBfPXQMHqkJPv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaea017616681b6c6074c1dbe69f6ff4_JaffaCakes118
Files
-
eaea017616681b6c6074c1dbe69f6ff4_JaffaCakes118.exe windows:4 windows x86 arch:x86
525a7adc97148f69e263cbcfc81e9c62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
CreateIcon
GetDlgItem
GetMenu
GetDC
CloseWindow
DrawIconEx
DialogBoxParamA
CopyImage
CopyIcon
CopyRect
GetCursor
DrawIcon
InsertMenuA
LoadCursorA
DialogBoxParamW
LoadMenuA
DrawTextW
GetWindowTextLengthA
GetFocus
EndDialog
IsMenu
IsWindow
kernel32
GetStartupInfoA
GetCPInfo
GetStringTypeW
SetFilePointer
MultiByteToWideChar
WriteFile
GetVersion
LCMapStringW
lstrcpynA
GetStdHandle
TerminateProcess
GetCommandLineA
GetACP
GetModuleFileNameA
GetFileType
CreateFileA
GetStringTypeA
SetHandleCount
lstrcatA
GetOEMCP
lstrcpynW
GetCurrentProcess
lstrcpyA
LCMapStringA
comctl32
MenuHelp
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
CreateToolbar
ImageList_DragEnter
ImageList_AddIcon
CreateToolbarEx
ImageList_Add
CreateStatusWindow
ImageList_LoadImageW
CreateUpDownControl
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ