Static task
static1
Behavioral task
behavioral1
Sample
eb22bc35a223b74fd97e34fefc4f69f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb22bc35a223b74fd97e34fefc4f69f3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb22bc35a223b74fd97e34fefc4f69f3_JaffaCakes118
-
Size
143KB
-
MD5
eb22bc35a223b74fd97e34fefc4f69f3
-
SHA1
43acd241f384e33afe0303aea2709bdb483430c9
-
SHA256
b466e44eb357dd88ce60e225b11582218af5a24b45cc0b664e1c7e836e72184f
-
SHA512
a673cbc2a1a4cb692570edd953165edfbdcbc28c37e5117b4fa5ebdff35fdc3919dc99b062c9146b75a03e310bca6d5b136011de692f4938d4e358809b785f37
-
SSDEEP
1536:Q3VXWtmxxtu/YouXPhYPxjFigVkbJVGK7OffE1Z2KyR441reyIyTiaYhrrdf1B7q:Q3JWcJYPpQvJVD12KWIy2/hrtq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb22bc35a223b74fd97e34fefc4f69f3_JaffaCakes118
Files
-
eb22bc35a223b74fd97e34fefc4f69f3_JaffaCakes118.exe windows:1 windows x86 arch:x86
bd0430f3ecac853f139adbcaec9d9fa7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
vfwprintf
memcpy
__set_app_type
_controlfp
fgetws
_locking
_adjust_fdiv
_winminor
_daylight
__setusermatherr
exit
_safe_fprem
_ismbbkana
_getche
_chkesp
_acmdln
vfprintf
wcscspn
__p__commode
__p__fmode
_gcvt
strcpy
_wtoi
_strnicoll
_adj_fdivr_m32
_except_handler3
_exit
__getmainargs
_XcptFilter
_mbsncat
_initterm
_mbsspnp
kernel32
lstrcmpiA
SearchPathA
IsValidCodePage
PulseEvent
FileTimeToLocalFileTime
GetVersionExA
GlobalLock
GetModuleHandleA
HeapCreate
GetProcessWorkingSetSize
GetThreadContext
GetStartupInfoA
GetExitCodeThread
WriteConsoleW
VirtualFree
GetNumberFormatA
HeapAlloc
ExitThread
GlobalReAlloc
InterlockedDecrement
SetEnvironmentVariableA
lstrcpyA
QueryPerformanceFrequency
FindResourceA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ