Static task
static1
Behavioral task
behavioral1
Sample
ea1fa952db3efd4a652607754f8fe739_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea1fa952db3efd4a652607754f8fe739_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea1fa952db3efd4a652607754f8fe739_JaffaCakes118
-
Size
15KB
-
MD5
ea1fa952db3efd4a652607754f8fe739
-
SHA1
618c808e182edd8aed2f2ba93a5433b4021309c2
-
SHA256
1e5e932bd26e3396d97009f21cf3e1f0442c38a6ab5c5e6a1f5f3706b305cc79
-
SHA512
1902e05fd5c91d2df42e95c0abf195a4c18d4d84de9c4406e0b0143e8f28d437711ddc03a56fed55c1acf663eaf28f0c3302ec566146ccee2497d0e6c18b014c
-
SSDEEP
384:UM3l2jwtnEFG0euC9CrclAGsyDTxMpst1aVE4yP2WcGNW5:PVnEFGUgmeDTmc1CXyPj4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1fa952db3efd4a652607754f8fe739_JaffaCakes118
Files
-
ea1fa952db3efd4a652607754f8fe739_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d9b99e2eb5a9be06ad1cacbf8a2093a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetSystemDirectoryA
SetFileAttributesA
GetFileAttributesA
GetWindowsDirectoryA
FreeLibrary
LoadLibraryA
GetProcAddress
CloseHandle
SetFileTime
GetFileTime
CreateFileA
MoveFileA
DeleteFileA
GlobalFree
WriteFile
LockResource
GlobalAlloc
GetModuleFileNameA
SizeofResource
FindResourceA
GetTempPathA
WinExec
GetModuleHandleA
lstrlenA
lstrcatA
GetEnvironmentVariableA
Sleep
ReadFile
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetSystemInfo
GetSystemDefaultLangID
LocalAlloc
LoadResource
GetTickCount
LocalFree
user32
MessageBoxA
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteExA
ord680
mfc42
ord1176
ord823
ord561
ord815
ord825
ord1243
ord6467
ord1578
ord600
ord826
ord269
msvcrt
__CxxFrameHandler
__dllonexit
_onexit
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
fprintf
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
atoi
strcat
strcpy
_initterm
printf
sprintf
strrchr
strchr
strlen
memcpy
free
fopen
fseek
ftell
malloc
memset
fread
_mkdir
_stricmp
fclose
_strnicmp
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ