Static task
static1
Behavioral task
behavioral1
Sample
eb9a0fbf141088feb42e323542447400_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
eb9a0fbf141088feb42e323542447400_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb9a0fbf141088feb42e323542447400_JaffaCakes118
-
Size
286KB
-
MD5
eb9a0fbf141088feb42e323542447400
-
SHA1
9015e2c0624fed96001575833865c2e44edc1f61
-
SHA256
ff43f8c2aa54212c6babb9c2fe8653b00dd2a4c488824710c27ac99a4e164369
-
SHA512
9dc79e0a3b161f6521cbe5177904f1dd2a09eb05c506fea174aeb06ef63138460bec059281ef27d437088adaa08c3e3abd47d80cc87048ee7faa3559310d1f09
-
SSDEEP
6144:MeZDYsEJnrX0ndDb50N86DJqvHm5vca5KP+k//XloBhu31:TZDYonVb50xD2uEa5C+I6j01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9a0fbf141088feb42e323542447400_JaffaCakes118
Files
-
eb9a0fbf141088feb42e323542447400_JaffaCakes118.exe windows:4 windows x86 arch:x86
92238227e85579387bf5cfbd3be95376
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GlobalUnlock
HeapReAlloc
GetStdHandle
GetACP
TlsFree
GetModuleHandleA
LoadLibraryA
TlsGetValue
WaitForSingleObject
GetConsoleCP
lstrlenA
VirtualProtect
CompareFileTime
HeapWalk
GetVersion
GetAtomNameA
GetTickCount
FindAtomA
InterlockedExchange
GetProfileIntA
user32
ShowWindow
SetPropA
GetScrollRange
SubtractRect
MessageBoxA
InsertMenuA
ModifyMenuA
GetWindowTextA
SetWindowPos
GetMenuStringA
CreateCaret
GetKeyboardLayout
InflateRect
PostMessageA
EqualRect
UpdateWindow
PostQuitMessage
LoadIconA
GetMenu
GetDlgItem
CopyRect
EnableScrollBar
DispatchMessageA
TranslateMessage
DestroyMenu
PaintDesktop
DialogBoxParamA
msi
MsiCloseHandle
MsiEnumProductsA
MsiDoActionA
MsiGetMode
MsiEnumClientsA
clbcatq
CoRegCleanup
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ