Static task
static1
Behavioral task
behavioral1
Sample
ea3089ff983c2967ec0cdae97f0f7770_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ea3089ff983c2967ec0cdae97f0f7770_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea3089ff983c2967ec0cdae97f0f7770_JaffaCakes118
-
Size
648KB
-
MD5
ea3089ff983c2967ec0cdae97f0f7770
-
SHA1
97b6c8f202127a64fb7d94354b6f9c8fad5569b0
-
SHA256
6e0de36d4cd5484a86a9b78c49faa0f57448a3ea9ebedddc63335e684ccadf47
-
SHA512
ef0c0675c207075c989c04887992fdfbc7ce782717ac147f5df7cb619870a30cf789b5be4d9b67ad1b1e2f06e7c1c3fd7caf3877d60b472f8ba57a3afdd2781b
-
SSDEEP
12288:mtrE5aSh3LGHFDA7Vh0a5liIsf3VlaPp0jIbJ:m+LhWc7VWwI3qPp0K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea3089ff983c2967ec0cdae97f0f7770_JaffaCakes118
Files
-
ea3089ff983c2967ec0cdae97f0f7770_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f77aee89d9771d7be3d84e2b0cf3264
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
MessageBoxW
DefWindowProcW
SendMessageW
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExA
DestroyWindow
LoadCursorA
DrawTextW
FindWindowW
CreateCursor
DestroyCursor
FlashWindowEx
SetForegroundWindow
DestroyCaret
ClientToScreen
DestroyAcceleratorTable
CloseClipboard
CreateCaret
DialogBoxIndirectParamW
DrawIcon
EndDeferWindowPos
EnableMenuItem
DestroyIcon
DeferWindowPos
PostMessageW
CreatePopupMenu
FrameRect
DrawFocusRect
CreateDialogParamW
CharLowerW
CreateMenu
IsIconic
DrawFrameControl
ChangeClipboardChain
kernel32
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetLastError
TlsGetValue
SetLastError
lstrcpyW
CreateDirectoryW
lstrcatW
CloseHandle
GetProcessHeap
HeapAlloc
GetModuleHandleW
ExitProcess
TlsAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
comctl32
ord17
ImageList_Create
shell32
CommandLineToArgvW
Sections
.text Size: 504KB - Virtual size: 503KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ