Static task
static1
Behavioral task
behavioral1
Sample
eaa7dab76ed6306409d4f1c4223de987_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
eaa7dab76ed6306409d4f1c4223de987_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eaa7dab76ed6306409d4f1c4223de987_JaffaCakes118
-
Size
248KB
-
MD5
eaa7dab76ed6306409d4f1c4223de987
-
SHA1
1edfaa87059d62e1d64bf6fee1ab997f5d4835d0
-
SHA256
668ce0c1cb9b53b9d86714fc3bf48ef4c4b623244b21c0b4c418244a4ea5abe5
-
SHA512
ef1d0b6c3278abfc5b28e22cf7e1e0d4329439ac011ded1daf19eec3e52a5c6e82f0c3ca5031dd6f4286d3199696769f90e12a7a6036dce5d5b3decd4940692b
-
SSDEEP
3072:pQYnYfB/uo4k72ciWLJdVyAtbjpOCXH2YdM6J7NmtnMJ2lmU:pQYsB/uEPNaAtbj9H2YdldNUMUlmU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaa7dab76ed6306409d4f1c4223de987_JaffaCakes118
Files
-
eaa7dab76ed6306409d4f1c4223de987_JaffaCakes118.exe windows:4 windows x86 arch:x86
680570cb114b470d8fb34dff7c56a38c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetProcessHeap
WriteFile
CreateFileA
WaitForSingleObject
CreateProcessA
GetStartupInfoA
ReadProcessMemory
GetCurrentProcess
LocalFree
LocalAlloc
lstrcpyn
LocalSize
GetModuleHandleA
RtlFillMemory
lstrlenA
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
RtlMoveMemory
CloseHandle
user32
ShowWindow
UpdateWindow
EnableWindow
IsWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateWindowExA
PostQuitMessage
GetWindowLongA
SetWindowLongA
IntersectRect
EqualRect
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SetWindowRgn
SetWindowPos
MessageBoxA
wsprintfA
IsWindowVisible
GetWindowRect
CallWindowProcA
FillRect
GetSysColor
GetDC
DefWindowProcA
TrackMouseEvent
SendMessageA
GetParent
InvalidateRect
EndPaint
BeginPaint
MoveWindow
LoadCursorA
LoadIconA
RegisterClassExA
GetClassInfoExA
ReleaseDC
gdi32
GetObjectA
CreateCompatibleDC
DeleteDC
CreateSolidBrush
StretchBlt
CreatePatternBrush
DeleteObject
SetBkColor
TextOutA
SetTextColor
CreateDIBitmap
CreateRectRgn
GetPixel
CombineRgn
SelectObject
BitBlt
msimg32
TransparentBlt
ntdll
RtlCompareMemory
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE