Static task
static1
Behavioral task
behavioral1
Sample
eab9317a8b202c132c78322aa06d798f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eab9317a8b202c132c78322aa06d798f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eab9317a8b202c132c78322aa06d798f_JaffaCakes118
-
Size
836KB
-
MD5
eab9317a8b202c132c78322aa06d798f
-
SHA1
57fd3808f9669a9c73a25b4fb7e20b18069e02ed
-
SHA256
fe7fea0f5adc8bf465ce6cfc42be84e7d89573b591e885482d6c17ae0d9ac8e2
-
SHA512
eb189ef350dc530a5f87dc6cf8ddb955969b101a386737eec441ce59c400e030cc62b9b0f0bfe064c8ae7ca0de692a4a3257772b4b398c933a64c4295b077b3b
-
SSDEEP
12288:hINizheL8lCSm4ifvE/NAxukDqihzVT/DiKD:hD8LMDcvE/oDJVjDiE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab9317a8b202c132c78322aa06d798f_JaffaCakes118
Files
-
eab9317a8b202c132c78322aa06d798f_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE