Static task
static1
Behavioral task
behavioral1
Sample
ea372f462bdd4069ff1190b29ee19dba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea372f462bdd4069ff1190b29ee19dba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea372f462bdd4069ff1190b29ee19dba_JaffaCakes118
-
Size
291KB
-
MD5
ea372f462bdd4069ff1190b29ee19dba
-
SHA1
ce233fc168c3c534aeb9f996d7e458dc3f38a9fb
-
SHA256
86525f7f241d684bec990ecc247d9d8ec35e085f49e2040cbcf913e4a1ce98cc
-
SHA512
fac242a28a4a7c1ed09897884ee1d4bb5602f3ba09eb99a44d1758d0ef016fc61c3fb1c0d2ba10fc3b3c91fae2c30073bfd0c54cec4bbaa2bbe372c45ac055b4
-
SSDEEP
6144:QWh2yA4B9xtHE+manwthiNfE+p5OoG38P+yDRUETyhqzvA5u:+yHx0H+pgoJdDRUD0Y5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea372f462bdd4069ff1190b29ee19dba_JaffaCakes118
Files
-
ea372f462bdd4069ff1190b29ee19dba_JaffaCakes118.exe windows:4 windows x86 arch:x86
450696b966d8727f7def654307d701ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
GetConsoleCursorInfo
WritePrivateProfileSectionW
UnmapViewOfFile
LeaveCriticalSection
GetFileType
CompareStringW
GlobalReAlloc
GetCommandLineW
ConnectNamedPipe
GetProcessHeap
IsValidLocale
GetBinaryTypeA
EndUpdateResourceA
CancelIo
EnumSystemCodePagesW
LoadLibraryExA
GetSystemTime
GetModuleFileNameW
GetVolumeInformationW
ExitThread
SetCurrentDirectoryA
SuspendThread
WriteProcessMemory
WaitNamedPipeA
VirtualQuery
FreeLibrary
GetOverlappedResult
SetLastError
FlushFileBuffers
GlobalFree
_hread
ExitProcess
user32
UpdateWindow
DrawAnimatedRects
MessageBoxIndirectW
SendMessageTimeoutW
ChildWindowFromPoint
GetKeyboardLayoutNameW
DispatchMessageA
GetMonitorInfoW
SetWindowLongA
ReleaseDC
FindWindowW
GetClipboardFormatNameA
version
VerQueryValueA
advapi32
CryptAcquireContextA
RegisterServiceCtrlHandlerW
RegOpenKeyA
SetTokenInformation
GetSecurityDescriptorGroup
LookupAccountSidA
RegQueryInfoKeyW
CryptCreateHash
LogonUserW
ws2_32
WSAAsyncGetHostByName
recv
WSAConnect
getprotobyname
ole32
ReadClassStg
ReadClassStm
oleaut32
QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLi
SafeArrayUnaccessData
SafeArrayPutElement
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ