Static task
static1
Behavioral task
behavioral1
Sample
ea0748179b744b4793a41aea4d6813cf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea0748179b744b4793a41aea4d6813cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea0748179b744b4793a41aea4d6813cf_JaffaCakes118
-
Size
353KB
-
MD5
ea0748179b744b4793a41aea4d6813cf
-
SHA1
b5500809d5053f19a8e740cede5ec2a8e7b27196
-
SHA256
197d50550cb215cd0bc36ffd53cb1e7129dee5f8751698b5e50eecc525aa8a83
-
SHA512
a345042c21b21bd83e02faa3bedf6338a8b5ad1dccd88a3d6d901bb9889b71c045734aef9526d728de096efc82cefc7c0386d2dea72df62f90cd569f63446d57
-
SSDEEP
6144:gh3m1Qr3/F2lUjWSIVvtYy8fd0WZ7Mx5nNZ36y3Ysb17chQ3rPp6metr:QZ3/JiSOvzYdxc5nDBohC7p6hd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0748179b744b4793a41aea4d6813cf_JaffaCakes118
Files
-
ea0748179b744b4793a41aea4d6813cf_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac32dea7ebf3d72b9e57d733c9431ec0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetLogColorSpaceW
SetDCPenColor
GetEnhMetaFileHeader
shlwapi
StrTrimA
StrCmpNA
StrCmpNIA
StrChrA
user32
CharLowerBuffA
ChangeDisplaySettingsW
ValidateRect
RedrawWindow
CharLowerA
IsDialogMessageW
InSendMessage
GetMessageTime
GetMessagePos
GetMenuCheckMarkDimensions
GetKeyboardState
GetKBCodePage
GetGuiResources
GetDoubleClickTime
GetDialogBaseUnits
GetDesktopWindow
GetClipboardViewer
GetClipboardOwner
GetCaretBlinkTime
GetCapture
GetActiveWindow
EnumDisplayDevicesW
EmptyClipboard
DrawAnimatedRects
DestroyMenu
DdeQueryStringW
CreateMenu
CreateIconFromResourceEx
CountClipboardFormats
CharUpperBuffA
CharToOemBuffA
AnyPopup
OemToCharBuffA
advapi32
ElfReportEventA
GetTrusteeTypeA
OpenSCManagerA
SetSecurityDescriptorDacl
CloseServiceHandle
kernel32
GetStartupInfoA
lstrcmpA
VirtualFree
VirtualAlloc
OpenWaitableTimerA
MapUserPhysicalPages
IsBadHugeReadPtr
GlobalFree
GlobalAlloc
GetVolumeNameForVolumeMountPointW
GetVersionExA
GetVersion
GetTickCount
GetThreadPriority
CreateHardLinkA
GetProcessHeap
GetModuleHandleA
GetLastError
GetDriveTypeA
GetCurrentThreadId
GetCurrencyFormatA
GetConsoleCP
GetComputerNameA
GetCommandLineA
ExitProcess
EnumResourceNamesW
EnumDateFormatsExW
EnumCalendarInfoExW
comctl32
InitCommonControls
version
GetFileVersionInfoA
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ