Static task
static1
Behavioral task
behavioral1
Sample
eba7301e7f3e5e06a26f3ecf5e5f59fe_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eba7301e7f3e5e06a26f3ecf5e5f59fe_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eba7301e7f3e5e06a26f3ecf5e5f59fe_JaffaCakes118
-
Size
278KB
-
MD5
eba7301e7f3e5e06a26f3ecf5e5f59fe
-
SHA1
60e4f6ab82956216e9607cbd4dea1d01dbbe90b0
-
SHA256
40f6f5edd03c12fc5ffba8b45ed076a1ad6242fe22df11388df67b669d7417ee
-
SHA512
a473969870f4fbfd44f7c9211641ce06aaedea8cdd5ee4501da75419f5d0997bf22c3c836d25dac1779eb69455423659e24981b9167785be9e84a7f3188c704c
-
SSDEEP
6144:PcL3ZE/VKNIrc7Le0OViRp4bRwSrmmlrxbNXs+MEGE:kL3ZE9KNtIiRp4bR1hNXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba7301e7f3e5e06a26f3ecf5e5f59fe_JaffaCakes118
Files
-
eba7301e7f3e5e06a26f3ecf5e5f59fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
3663152e31bad8dc89ec90a3313703ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
CreatePipe
ResumeThread
GetVersion
WriteFile
ExitThread
FindAtomA
CreateDirectoryA
GetDriveTypeA
CreateSemaphoreW
GetCommandLineA
RemoveDirectoryA
CloseHandle
SetVolumeLabelA
IsBadWritePtr
GetFileType
GetModuleFileNameA
RemoveDirectoryA
FindClose
SetLastError
HeapFree
SetStdHandle
GetModuleHandleA
HeapCreate
CreateThread
uxtheme
GetThemeBool
GetThemeSysSize
GetThemeTextMetrics
OpenThemeData
CloseThemeData
DrawThemeEdge
DrawThemeBackground
IsThemeActive
GetThemeTextExtent
GetThemeColor
SetWindowTheme
CloseThemeData
GetWindowTheme
olesvr32
OleRevokeServer
OleRevokeServer
OleRevokeServer
OleRevokeServer
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE