Static task
static1
Behavioral task
behavioral1
Sample
eab80400421a56d7fa9165d4e9444e0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eab80400421a56d7fa9165d4e9444e0b_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
eab80400421a56d7fa9165d4e9444e0b_JaffaCakes118
-
Size
82KB
-
MD5
eab80400421a56d7fa9165d4e9444e0b
-
SHA1
9ce7ba3d2e03e77b34450d3c04f1de847b71bbe9
-
SHA256
85d7d95cb9c2c6c821e3ef07027efc16d9bbda9047a90d5e238d95884a170c16
-
SHA512
be9c0a57a1fff3a63b8836ad429f6e6f0107f017c5fd842fdc252cc0c0488c54296d6255010f0926071c6e8c2a56a29fd4fa4a60ea09c1f7be8224ae6c692a0c
-
SSDEEP
1536:2MQ9pC2lWnGXRZkhWZ8Xw2RHk1nlwbY7MFQP//Pe6:2rTrW8MQxAk1lwbYY6P//W6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab80400421a56d7fa9165d4e9444e0b_JaffaCakes118
Files
-
eab80400421a56d7fa9165d4e9444e0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
efcf8c179b634be486e0956724259f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z
kernel32
GetUserDefaultLCID
TlsFree
TlsAlloc
VerLanguageNameW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW
ddraw
DirectDrawCreateEx
DirectDrawCreate
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ