Static task
static1
Behavioral task
behavioral1
Sample
ea9d7e18bbf0b4909d81d8b6d7eb30b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea9d7e18bbf0b4909d81d8b6d7eb30b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea9d7e18bbf0b4909d81d8b6d7eb30b7_JaffaCakes118
-
Size
154KB
-
MD5
ea9d7e18bbf0b4909d81d8b6d7eb30b7
-
SHA1
34e3eac4b53ed39ab3efc788a466a4e4ba05ef58
-
SHA256
7408482d4dfd0687cf40275d42216c0d5eeaa418f11a313f5a26232eb9531957
-
SHA512
3023e68391d31bab39bf3119374107c50dd6eb3949b62d8eef3ad155142ca7d265e0179c3267884550292dc688a7ee9080410cf7a1eb56b8c4046e7ada87db1c
-
SSDEEP
3072:6TCfx6u5UjIbpgS+3GPx1HvNgkny/xvwWu8OfEw9qsX8McotHpoV1r2hQO+94xX5:6+fxd5UjIqS+W5xeDFlOffNcotJ0r2hT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9d7e18bbf0b4909d81d8b6d7eb30b7_JaffaCakes118
Files
-
ea9d7e18bbf0b4909d81d8b6d7eb30b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
d354a48cf924d41606e2662564d30067
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
kernel32
WritePrivateProfileSectionW
CreateFileA
GetSystemDirectoryW
SetLastError
IsProcessorFeaturePresent
DeleteCriticalSection
GetConsoleMode
HeapDestroy
WriteFile
GetModuleHandleA
VirtualFree
LCMapStringA
lstrcmpiW
WriteConsoleInputVDMA
FreeEnvironmentStringsA
LoadLibraryW
GetModuleFileNameA
TlsSetValue
GetProcAddress
TlsGetValue
FlushFileBuffers
CopyFileW
InterlockedDecrement
GetVersion
WideCharToMultiByte
SetUnhandledExceptionFilter
SetStdHandle
ExitProcess
GetCPInfo
GetEnvironmentStringsW
GetProcessHandleCount
FindResourceW
lstrlenA
GetDriveTypeW
LoadLibraryA
InterlockedIncrement
GetVersionExW
LoadResource
ReadFile
GetFileType
GetLocaleInfoA
RaiseException
GetACP
GetStringTypeW
GetConsoleOutputCP
GetCurrentProcessId
EnumResourceNamesA
CloseHandle
LoadLibraryExW
HeapFree
GetOEMCP
GetStdHandle
lstrcmpA
GetStringTypeA
GetStartupInfoA
CreateFileMappingW
LCMapStringW
Sleep
GetLastError
SetHandleCount
GetModuleHandleW
TlsFree
LocalFree
WriteConsoleA
InitializeCriticalSection
GetCommandLineW
VirtualAlloc
UnhandledExceptionFilter
GetVersionExA
GetConsoleCP
GetTickCount
GetCurrentProcess
SetFilePointer
TlsAlloc
QueryPerformanceCounter
LocalAlloc
FreeEnvironmentStringsW
GetThreadLocale
FlushInstructionCache
GetCommandLineA
GetEnvironmentStrings
GetSystemTimeAsFileTime
FreeLibrary
WaitForSingleObject
GetStartupInfoW
IsDebuggerPresent
HeapAlloc
HeapSize
CreateFileW
InterlockedExchange
GetFileSize
DeleteFileW
SizeofResource
GetFileAttributesW
LockResource
GetProcessHeap
InterlockedCompareExchange
LeaveCriticalSection
CreateSemaphoreW
MulDiv
GetModuleFileNameW
CreateProcessW
RtlUnwind
WriteConsoleW
GetCurrentThreadId
HeapCreate
HeapReAlloc
lstrlenW
user32
GetWindowRect
TranslateMessage
GetWindowInfo
SetWindowTextW
DestroyWindow
GetClientRect
LoadCursorW
GetDC
DispatchMessageW
MapWindowPoints
GetWindowTextLengthW
GetDlgItemTextW
PeekMessageW
SetDlgItemTextW
MessageBoxW
GetParent
BeginPaint
EndPaint
SystemParametersInfoW
SetWindowPos
GetDlgItem
GetWindow
SetCapture
GetClassInfoExW
CreateWindowExW
RegisterClassExW
EndDialog
msvfw32
ICInfo
ole32
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ