Static task
static1
Behavioral task
behavioral1
Sample
ebbda921300013c896023f680d7f5d79_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebbda921300013c896023f680d7f5d79_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebbda921300013c896023f680d7f5d79_JaffaCakes118
-
Size
780KB
-
MD5
ebbda921300013c896023f680d7f5d79
-
SHA1
4e1eb3ee016370d898971cbc51e4b84e336d1a0d
-
SHA256
04a1ef35975291f4db51357b80de710dc2f37e0ac4bd354e2366dd777f9091c2
-
SHA512
8d933fb674c50fee11d7a5c7bd761282969ad6276434ca84fdbe45122615357c6ef8ad03ab71e630a46d8312013a184f556d9ae839de483610c7e4bf3e544ec8
-
SSDEEP
24576:8ApgY7qMeuM4nB6areY5H2tQNmMsPFeSI/w:/D7u+n0aregH2tQNBrw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebbda921300013c896023f680d7f5d79_JaffaCakes118
Files
-
ebbda921300013c896023f680d7f5d79_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d378bf9f5f9ab6619a3c9aeef5f3ec2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
Sections
pec1 Size: - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE