Static task
static1
Behavioral task
behavioral1
Sample
ea175a44c3054314a45997f787e69d14_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea175a44c3054314a45997f787e69d14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea175a44c3054314a45997f787e69d14_JaffaCakes118
-
Size
161KB
-
MD5
ea175a44c3054314a45997f787e69d14
-
SHA1
a9a13cffef72cf4666f5ce5a171471544d176313
-
SHA256
91ec95c597faa7407e8935c389aca65a68d3c410c8389f70aaa9798783d04090
-
SHA512
0812010d3e30ac74b38189b02a657f31750395377c1e8ebae5a3774ebd6918665e0200be6e5c9c3dd1816075e925c6079c11416b0c42485b2fcf75637ce52b52
-
SSDEEP
3072:P2d2n2Az5FxuHuiSivnE4St1zqf0NlKx7k/dhm4t3hEVw:PIqbz5F8HuRtb1+8Ngx7kPms3hv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea175a44c3054314a45997f787e69d14_JaffaCakes118
Files
-
ea175a44c3054314a45997f787e69d14_JaffaCakes118.exe windows:4 windows x86 arch:x86
87d8154de7bd913fcdab4e4939ce1d01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
zspool
GetPrintProcessorA
ZSP_MakeSpoolFilePath
OpenPrinterA
GetJobA
ClosePrinter
kernel32
CreateThread
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
FreeLibrary
DeleteFileA
GetProcAddress
LoadLibraryA
user32
PostMessageA
PostQuitMessage
IsWindow
DefWindowProcA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
DispatchMessageA
TranslateMessage
ShowWindow
CreateWindowExA
GetWindowTextA
msvcrt40
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
_except_handler3
_controlfp
__p__acmdln
exit
malloc
_XcptFilter
free
_exit
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ