Static task
static1
Behavioral task
behavioral1
Sample
eab65ba8de394e35c208bdbe90a29a62_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eab65ba8de394e35c208bdbe90a29a62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eab65ba8de394e35c208bdbe90a29a62_JaffaCakes118
-
Size
172KB
-
MD5
eab65ba8de394e35c208bdbe90a29a62
-
SHA1
52e3fa0399dcfab923f72d4118ce4899d2a07970
-
SHA256
1af1a2e1edca05e85ea78b693859a479e95dccda7048ae26804933f7f69796f3
-
SHA512
5be731fb649dcd719a1bb3eed6940c35d5a2821e46952507e9f573acd9bef1bec5cfd139088cdec36ee2997ad7379b73e06f5f1647b56017a7f58f3f977c8d73
-
SSDEEP
3072:oLjGkKWcuraMMD613oynbmJFQjioJc5UtG8zY5iAy7C5r63QIphzTk44rVnFB:gjXcwmbAoQxJfzK+iSphz8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab65ba8de394e35c208bdbe90a29a62_JaffaCakes118
Files
-
eab65ba8de394e35c208bdbe90a29a62_JaffaCakes118.exe windows:4 windows x86 arch:x86
957feb96bc71f1c3a28ab3bc063c7171
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
user32
GetWindowLongA
SetWindowPos
GetDlgItem
LoadCursorA
IsWindow
GetSysColor
SetCursor
MoveWindow
GetWindowInfo
ReleaseCapture
ReleaseDC
FillRect
SetWindowLongA
GetDC
SetCapture
kernel32
SetTapePosition
InterlockedExchange
ClearCommError
Sleep
FindClose
GetLocalTime
GetCurrentProcessId
EnumResourceNamesA
FatalExit
GetWindowsDirectoryA
GetVersion
FindFirstFileA
winmm
mciSendCommandA
sndPlaySoundA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ