Static task
static1
Behavioral task
behavioral1
Sample
GUI/GUI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
GUI/GUI.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
console/console.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
console/console.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
crt0/Build.bat
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
crt0/Build.bat
Resource
win10v2004-20240226-en
General
-
Target
ec680339fb711cd8334dc802c5df2c2e_JaffaCakes118
-
Size
12KB
-
MD5
ec680339fb711cd8334dc802c5df2c2e
-
SHA1
79d3904a5dc56738ba424e20507ef827928d4489
-
SHA256
233fe47a84c59539e6fe5f5cba1f057087314f93415bd75acd582b120616fed7
-
SHA512
276e5638ac1724936aac96ff2d02a7a634bfb8c7ff9c04727d9dc9bc8ae3bbf41ba69df38696db52ba155647c0503cbdc009287fcb8f9e1d9e676a7f05e54fcb
-
SSDEEP
192:SxLaL1rrLtj0NzJ+12NuATt7HvLkIkIN5qtW5n59Oul:Sx+L1rr5ArBvL15qO5Vl
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/GUI/GUI.exe unpack001/console/console.exe
Files
-
ec680339fb711cd8334dc802c5df2c2e_JaffaCakes118.zip
-
GUI/GUI.exe.exe windows:4 windows x86 arch:x86
057f7de4064f72c8d3a76bfbcf5e5ab4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCommandLineA
ExitProcess
user32
DestroyWindow
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
DispatchMessageA
GetMessageA
Sections
.text Size: 512B - Virtual size: 433B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 7B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
GUI/GUI.ppj
-
GUI/GUI.ppx.xml
-
GUI/GUI.tag
-
GUI/Window.c
-
GUI/output/Window.obj
-
Readme.txt
-
console/console.exe.exe windows:4 windows x86 arch:x86
1dec20cbcde828b2098d9f8f7f340357
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
msvcrt
printf
Sections
.text Size: 512B - Virtual size: 199B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
console/console.ppj
-
console/console.ppx.xml
-
console/console.tag
-
console/main.c
-
console/msvcrt.def
-
console/msvcrt.lib
-
console/output/main.obj
-
crt0/Build.bat
-
crt0/crt0.lib
-
crt0/crt0cons.asm
-
crt0/crt0cons.obj
-
crt0/crt0gui.asm
-
crt0/crt0gui.obj