Static task
static1
Behavioral task
behavioral1
Sample
ea5d47c5004b2df20c43309ebf83c082_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea5d47c5004b2df20c43309ebf83c082_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea5d47c5004b2df20c43309ebf83c082_JaffaCakes118
-
Size
78KB
-
MD5
ea5d47c5004b2df20c43309ebf83c082
-
SHA1
6ab3f01387506ab98b190cc497c4ba957bf3f372
-
SHA256
ccb4eed7704289c70e8467642e1ff848b490aa913e5e58c0ca670d1ddd49e287
-
SHA512
68dbdacf8d1a3e8ea1a1589c68f942c7382cdb84ddcd3e84373af360d1d70bef704093b384c176f37b968bb7c31edf554ae150a9f65112bfe5df6fa76c862522
-
SSDEEP
1536:AY3FA/D1g2MbaAImLVaabelKq1IHVN1YeyAQvqXnsNgRLi2vdbjqwCSynP:A0A7UfjLVa8eEWgN1YeyA33se42ZjiSG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea5d47c5004b2df20c43309ebf83c082_JaffaCakes118
Files
-
ea5d47c5004b2df20c43309ebf83c082_JaffaCakes118.exe windows:6 windows x86 arch:x86
fbddf4ef7aab66180ae484bda8693f09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_wcsnicmp
_initterm
rand
iswspace
_wcsupr
_beginthreadex
_errno
_unlock
_j0
__dllonexit
_lock
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy
kernel32
GetProcessHeaps
CreateIoCompletionPort
GetQueuedCompletionStatus
HeapValidate
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsFree
TlsSetValue
HeapCreate
HeapSize
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime
gdiplus
GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ