Static task
static1
Behavioral task
behavioral1
Sample
eb40edc7d623e60e8fd9d39b407fed5e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eb40edc7d623e60e8fd9d39b407fed5e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb40edc7d623e60e8fd9d39b407fed5e_JaffaCakes118
-
Size
203KB
-
MD5
eb40edc7d623e60e8fd9d39b407fed5e
-
SHA1
1d6c714b6407368e2a8b5af1a16475c8701d90fe
-
SHA256
75f25d200cd1fec0be197f2f5ffaf452dd5efa73a35787c18d88f5d32d246552
-
SHA512
ae1c00bc8b8d2a2a75b9d36d3a8ed929713953a2a64b57670649bd164a9830406af3045756170fa296721b5e71f2b7a26f53b3816ef74661476fbbef04a4c671
-
SSDEEP
3072:pjpWXaKyNCj4LXSSJaJOP1H2rVBUJXwqB3SkkZTctWvPxBo:aX1o2jJOP+VYwqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb40edc7d623e60e8fd9d39b407fed5e_JaffaCakes118
Files
-
eb40edc7d623e60e8fd9d39b407fed5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d06f8303e6b226d2152a1660a8f98be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
rand
wcschr
log
malloc
strlen
pow
ole32
CoCreateGuid
GetHGlobalFromStream
CoRevokeClassObject
gdi32
GetCurrentPositionEx
GetClipBox
GetDIBits
GetDCOrgEx
GetDIBColorTable
kernel32
GetProcAddress
VirtualAllocEx
GlobalAlloc
VirtualQuery
MulDiv
ExitThread
GetCommandLineW
WriteFile
LocalAlloc
lstrcpynA
GetVersionExA
VirtualAlloc
MoveFileA
lstrcmpA
LoadLibraryA
LocalReAlloc
LocalFree
WideCharToMultiByte
lstrcatA
ExitProcess
lstrcpyA
HeapDestroy
WaitForSingleObject
GetCommandLineA
GetModuleHandleA
lstrcmpiA
SizeofResource
GetOEMCP
LoadLibraryExA
VirtualFree
MoveFileExA
lstrlenA
IsBadReadPtr
shlwapi
SHSetValueA
SHDeleteValueA
PathGetCharTypeA
PathIsDirectoryA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerInstallFileA
comdlg32
GetFileTitleA
ChooseColorA
GetSaveFileNameA
advapi32
RegQueryInfoKeyA
RegQueryValueExA
RegEnumKeyA
shell32
SHGetSpecialFolderLocation
DragQueryFileA
SHGetDiskFreeSpaceA
SHGetFileInfoA
comctl32
ImageList_Read
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_Write
ImageList_DragShowNolock
user32
GetWindowTextA
GetTopWindow
GetWindowDC
GetWindow
KillTimer
GetWindowLongA
GetSubMenu
GetWindowPlacement
InsertMenuA
GetWindowThreadProcessId
GetWindowRect
IsWindowVisible
GetSysColor
IsChild
IsIconic
IsWindowEnabled
IsZoomed
InvalidateRect
InsertMenuItemA
IsWindow
IsDialogMessageW
GetSystemMenu
GetScrollRange
IntersectRect
InflateRect
IsWindowUnicode
IsRectEmpty
GetWindowLongW
IsDialogMessageA
GetSysColorBrush
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 773B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 1024B - Virtual size: 1022B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 1024B - Virtual size: 525B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc9 Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ