Static task
static1
Behavioral task
behavioral1
Sample
ea9c58043a9f622d214d8d0bcf2a0651_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea9c58043a9f622d214d8d0bcf2a0651_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea9c58043a9f622d214d8d0bcf2a0651_JaffaCakes118
-
Size
31KB
-
MD5
ea9c58043a9f622d214d8d0bcf2a0651
-
SHA1
9a601baf47cef7e3bab7e9bfa77862e46f6824fe
-
SHA256
7687d4831d60c2e56da52a88f7ec00f1b91b3f54225c95e624d53ffdf2babe02
-
SHA512
6d019023efec5bd90d708e35eff2d0466a5321c140c627da6e66938ad26863bd3d510784cd1f5447ecbdd4c46ae022591b6b23363f5b007a1fc883a7db03e30d
-
SSDEEP
768:xP0ymN9W7LsuE0ET2SIxiPxP9XFK7GdQ/:1AE7GHsyk7GdQ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9c58043a9f622d214d8d0bcf2a0651_JaffaCakes118
Files
-
ea9c58043a9f622d214d8d0bcf2a0651_JaffaCakes118.exe windows:4 windows x86 arch:x86
57831fe1c9a614fb3bbec5ab7a726840
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_wsplitpath
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free
calloc
memcpy
_except_handler3
memchr
memcmp
strstr
_itoa
strlen
??2@YAPAXI@Z
??3@YAXPAX@Z
wcsstr
wcschr
wcslen
wcscat
memset
wcsncpy
__CxxFrameHandler
wcscpy
kernel32
GetStartupInfoA
GetFileSize
CreateFileMappingA
GetFileTime
SetFileTime
MapViewOfFile
ExitThread
GetModuleFileNameW
UnmapViewOfFile
FormatMessageA
CreateFileW
SetFilePointer
WriteFile
lstrlenA
LocalFree
GetCurrentProcess
WaitForSingleObject
GetExitCodeThread
CreateProcessW
CloseHandle
ResumeThread
GetLastError
ExitProcess
GetTempPathW
GetFileAttributesW
CreateDirectoryW
CreateThread
LoadLibraryA
FreeLibrary
GetDiskFreeSpaceW
GetProcAddress
GetModuleHandleA
CreateMutexA
user32
SetForegroundWindow
ShowWindow
FindWindowA
wsprintfA
DestroyWindow
MessageBoxA
SetWindowTextA
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfW
PostQuitMessage
CreateDialogParamA
advapi32
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ