Static task
static1
Behavioral task
behavioral1
Sample
ea7b876e2c3c3f905d53b7c2d35da7c4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea7b876e2c3c3f905d53b7c2d35da7c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea7b876e2c3c3f905d53b7c2d35da7c4_JaffaCakes118
-
Size
55KB
-
MD5
ea7b876e2c3c3f905d53b7c2d35da7c4
-
SHA1
4002038cd836ef47c0f1cad1b14ea44f759cdb3a
-
SHA256
4a93637fcb49ab524583e2b5906a12635349171c5f0570018cfe8b94698fd5ec
-
SHA512
aa2dabba0db29cb31c0cc0a0f2c898d6b8bfd5f1b4233c1ad6fda7375c691e3feefcc137c7680bb3239a1387db55fe956a2af9fccc0d792b1153edd74d769cd9
-
SSDEEP
1536:7pWgim9mwIT5ISSIDAyWqb/LWiIQzAGg248H27D3CD:9im9mwIFISSIDAyWqb/SzQlN2f3CD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea7b876e2c3c3f905d53b7c2d35da7c4_JaffaCakes118
Files
-
ea7b876e2c3c3f905d53b7c2d35da7c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1937f4b72aab4f6ac7ada86a92b82b8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
InsertMenuA
CopyIcon
GetWindowTextA
CloseWindow
DialogBoxParamW
LoadCursorA
DrawIconEx
GetWindowTextLengthA
DrawIcon
DrawTextA
DrawTextW
GetFocus
CopyImage
EndDialog
GetCursor
DialogBoxParamA
LoadMenuA
IsWindow
GetDlgItem
CreateIcon
IsMenu
CopyRect
GetMenu
kernel32
GetStringTypeA
MultiByteToWideChar
GetCommandLineA
LCMapStringA
lstrcpynW
GetStartupInfoA
lstrcpyA
GetACP
GetCurrentProcess
SetFilePointer
GetStringTypeW
SetHandleCount
GetOEMCP
GetFileType
GetVersion
lstrcpynA
GetCPInfo
LCMapStringW
GetStdHandle
CreateFileA
WriteFile
lstrcatA
TerminateProcess
GetModuleFileNameA
comctl32
ImageList_Add
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_AddIcon
CreateToolbarEx
DrawStatusTextW
ImageList_Draw
InitCommonControls
CreateStatusWindow
ImageList_Create
advapi32
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExW
RegSetValueA
RegOpenKeyW
RegDeleteValueW
RegCreateKeyA
RegEnumKeyW
RegOpenKeyA
RegEnumKeyExA
RegCreateKeyExW
RegCreateKeyExA
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 17.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ