Static task
static1
Behavioral task
behavioral1
Sample
ea52bee8f8c6d5dcc62c91f2353230c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea52bee8f8c6d5dcc62c91f2353230c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea52bee8f8c6d5dcc62c91f2353230c0_JaffaCakes118
-
Size
320KB
-
MD5
ea52bee8f8c6d5dcc62c91f2353230c0
-
SHA1
beecf8396adcfb007bc47619f3f3fa3c946dbb33
-
SHA256
057c8d6d9cdd24dc0c10c0f815531b25ca8d5bc5acb4e26df17e9b30663c0611
-
SHA512
6f0de9446909de6f860d95bf8848881ce4ee0f9d89b2adb5e37842e2ddc995bd4e3a832c0d70c48df7720f4b5105df6739ce5cc4c6cee740e3f5448fe526fcb4
-
SSDEEP
6144:tVrEWiGKO9gIFD7py1d/99GxqI7lWA/LtC6DaRNAk93gBdk4mW3:LrXMOic1sUxXxWKZLwSSgB2W3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea52bee8f8c6d5dcc62c91f2353230c0_JaffaCakes118
Files
-
ea52bee8f8c6d5dcc62c91f2353230c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f245773d9f643b806d76cf3223ebd4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
IsDebuggerPresent
GetACP
GetTapeStatus
GetCurrentProcessId
GetProcessVersion
InterlockedExchange
HeapDestroy
CreateIoCompletionPort
GetModuleHandleA
GetCurrentThread
GetLogicalDrives
GetStdHandle
WaitForSingleObject
HeapQueryInformation
HeapCreate
GetProcessHeap
GlobalMemoryStatus
GetEnvironmentStringsA
VirtualProtect
LoadLibraryExA
user32
DrawTextA
BeginPaint
SetForegroundWindow
FillRect
GetParent
ReleaseDC
DragDetect
GetClassNameA
ShowWindow
GetCursorPos
wsprintfA
FrameRect
GetDlgItem
GetTitleBarInfo
GetFocus
GetWindowTextLengthA
GetWindow
EndPaint
SetActiveWindow
advapi32
RegCreateKeyA
RegFlushKey
RegSetValueExA
RegCloseKey
RegEnumKeyA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ