Static task
static1
Behavioral task
behavioral1
Sample
eb3875cdae4e9610959d1894ae7d7dde_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb3875cdae4e9610959d1894ae7d7dde_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb3875cdae4e9610959d1894ae7d7dde_JaffaCakes118
-
Size
121KB
-
MD5
eb3875cdae4e9610959d1894ae7d7dde
-
SHA1
6c8505690014c00a974f399e9aeadac3678734ca
-
SHA256
e0a83092d94eb2d7a5c049bdc6ac7a2e049ff67e76500b297505c82d90e96a8b
-
SHA512
c679e604806b231e2edce2a49cffd08adf0e4a8612814bc637cf8387386e832432ee58cb23a980f90c58c1a75c4bd886b94cfba107ccf5e548e9a18245dfb86f
-
SSDEEP
1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlHA:RxQEDtqrQ5re9BS+blIpNtix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb3875cdae4e9610959d1894ae7d7dde_JaffaCakes118
Files
-
eb3875cdae4e9610959d1894ae7d7dde_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dfe3650a0316b3d237fb157b095d9f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDIBColorTable
GetDCOrgEx
CreatePalette
SelectPalette
SetTextColor
GetCurrentPositionEx
user32
RegisterClipboardFormatA
GetKeyboardState
GetKeyboardLayout
SetFocus
IsRectEmpty
InflateRect
OffsetRect
RemoveMenu
IsWindowUnicode
AdjustWindowRectEx
CharUpperBuffA
CallWindowProcA
SetTimer
GetMessagePos
BeginPaint
SendMessageW
GetScrollRange
IsDialogMessageW
DrawIcon
SetActiveWindow
DrawMenuBar
SetScrollPos
SetWindowPlacement
RegisterWindowMessageA
GetDCEx
ShowOwnedPopups
CheckMenuItem
OemToCharA
GetScrollInfo
EnumWindows
SetCapture
CreateWindowExA
IntersectRect
GetPropA
GetDC
GetCursor
GetWindowLongA
GetClassLongA
GetMenuItemCount
SetParent
GetMenuItemInfoA
RegisterClassA
InvalidateRect
CharLowerBuffA
GetActiveWindow
PeekMessageA
DestroyIcon
EmptyClipboard
EnumThreadWindows
LoadIconA
DrawEdge
ChildWindowFromPoint
DefFrameProcA
wsprintfA
PeekMessageW
DestroyWindow
SetWindowTextA
GetWindowTextA
IsZoomed
IsDialogMessageA
GetFocus
SetWindowPos
EndPaint
DrawIconEx
FrameRect
MessageBoxA
WaitMessage
PostMessageA
KillTimer
IsChild
GetMenuState
GetForegroundWindow
DispatchMessageA
DefWindowProcA
SetMenuItemInfoA
RemovePropA
GetKeyNameTextA
LoadCursorA
SetClipboardData
ShowWindow
CharLowerA
GetWindowRect
GetKeyboardType
EnableWindow
SetWindowLongW
GetSysColor
DefMDIChildProcA
DestroyCursor
UnhookWindowsHookEx
OpenClipboard
GetKeyboardLayoutList
FillRect
TranslateMessage
GetCapture
InsertMenuA
kernel32
VirtualAllocEx
SetHandleCount
InitializeCriticalSection
lstrcatA
lstrcpynA
lstrlenA
ReadFile
GetLocalTime
GetCurrentThreadId
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetProcAddress
GlobalAddAtomA
LocalFree
SetEvent
ExitProcess
GetOEMCP
shell32
SHGetFileInfoA
version
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE