Static task
static1
Behavioral task
behavioral1
Sample
eb0ca1633f773cc9b47f0e8ca73be321_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eb0ca1633f773cc9b47f0e8ca73be321_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb0ca1633f773cc9b47f0e8ca73be321_JaffaCakes118
-
Size
104KB
-
MD5
eb0ca1633f773cc9b47f0e8ca73be321
-
SHA1
3d8255f47d800633be7b4d95ad91882cfecfd759
-
SHA256
d47f32b24d9e569072a0bf4211ef69cf38718a8e7ae7eacb31471117e918a4a2
-
SHA512
0c14383a8f81fd4eb0be6975e3e79996f4d059ba21b6ec15a6bd2983ffd9855ee4c6d495581379ef9c16335deeafb83b8ad4eca092f21a14bbe61da528ce41ff
-
SSDEEP
1536:LxC8A1DXsecgcFY4ltW8Y33u7uFzQHuGk8Bt:ZA5sD3lNY3WezQxv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb0ca1633f773cc9b47f0e8ca73be321_JaffaCakes118
Files
-
eb0ca1633f773cc9b47f0e8ca73be321_JaffaCakes118.exe windows:3 windows x86 arch:x86
4b670fc0175aee2d51e0c4624af9c92c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateThread
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapDestroy
HeapFree
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
Sleep
VirtualAlloc
user32
CreateWindowExA
DefWindowProcA
DialogBoxParamA
GetClientRect
GetSystemMetrics
IsDlgButtonChecked
KillTimer
LoadCursorA
LoadStringA
MessageBoxA
PeekMessageA
SetDlgItemTextA
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ