Static task
static1
Behavioral task
behavioral1
Sample
ecc624f8f5d3ec8f4a03e9c150c6f596_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ecc624f8f5d3ec8f4a03e9c150c6f596_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecc624f8f5d3ec8f4a03e9c150c6f596_JaffaCakes118
-
Size
1.0MB
-
MD5
ecc624f8f5d3ec8f4a03e9c150c6f596
-
SHA1
66f962977c8654b14930135477be3d176f5e3266
-
SHA256
a21ed3ff5b3bcbeda5e817f4a8e1c27ba527a9481d655a3459dacdc07b3ad407
-
SHA512
20404e886eb71f12d80e0ca5becb73378bfc796429cf737d668be969999c5966f670aed963b43b14da81e2abc2627cb33d4cee381ac23eb2ae98ceffc3b9f51e
-
SSDEEP
24576:X4ExBkJCTedFLxfmXB/Ud8ewTyDdCG+wIc31O:b/TEFxW/Ud/JgGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecc624f8f5d3ec8f4a03e9c150c6f596_JaffaCakes118
Files
-
ecc624f8f5d3ec8f4a03e9c150c6f596_JaffaCakes118.exe windows:4 windows x86 arch:x86
f251b1c08024f0634674a07435285e4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
GetTickCount
GetLastError
lstrcpyA
GetStartupInfoA
user32
GetMessageA
SetFocus
GetFocus
GetWindowRect
ShowWindow
DefWindowProcA
DestroyWindow
DispatchMessageA
EndDialog
MessageBoxA
GetClientRect
CreateWindowExA
gdi32
GetObjectA
GetTextColor
GetStockObject
GetPixel
PatBlt
GetDeviceCaps
GetTextExtentPoint32A
SetROP2
CreateFontIndirectA
SetPixel
MoveToEx
GetBkColor
Sections
.text Size: 1024B - Virtual size: 969B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 985B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1018KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ