Static task
static1
Behavioral task
behavioral1
Sample
eafa5759c69ed36d5d5f2ad5cbe9aedb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eafa5759c69ed36d5d5f2ad5cbe9aedb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eafa5759c69ed36d5d5f2ad5cbe9aedb_JaffaCakes118
-
Size
439KB
-
MD5
eafa5759c69ed36d5d5f2ad5cbe9aedb
-
SHA1
be2d1476cf48acb0e8c9f80a08fe38d9447451ff
-
SHA256
d843b64e9bb64e5563866b14e93ff49047a3fa8abebcf8afc8963e7fe46c65bd
-
SHA512
afd3fb4fd684a7cdb555bbf9f628ec6a7f0c79b1a0e4723e225793688521306701457dc4888b3f4fe5ab8a9d7897ab910ceafb29e6c039beb8a9217b9f19ce03
-
SSDEEP
3072:XAHsKXunwmIwMY///mYHA2oIiwrQxM5cfxwV03lvZaL0+8TiSpN6gF:+1X2Owx/3pHA2awrQxMExwQ5H+2i46g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eafa5759c69ed36d5d5f2ad5cbe9aedb_JaffaCakes118
Files
-
eafa5759c69ed36d5d5f2ad5cbe9aedb_JaffaCakes118.exe windows:1 windows x86 arch:x86
6e6b36265519ba12a03240eefbcd8c68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
WriteFile
CreateThread
lstrlenW
InitializeCriticalSection
CloseHandle
GetCommandLineA
CreateThread
GetACP
FormatMessageW
HeapDestroy
InterlockedDecrement
GetCurrentProcessId
SetFilePointer
Sleep
LoadLibraryA
MultiByteToWideChar
GetProcAddress
CreateThread
LocalFree
lstrcmpiW
GetModuleFileNameA
HeapDestroy
UnhandledExceptionFilter
QueryPerformanceCounter
VirtualAlloc
InterlockedIncrement
LocalFree
SetEvent
lstrcpyW
LeaveCriticalSection
ExitProcess
GetTickCount
LoadLibraryA
SetLastError
GetCurrentProcess
LoadLibraryW
CreateFileW
GetProcAddress
ExitProcess
GetCurrentThreadId
GetLastError
LocalAlloc
GetTickCount
MultiByteToWideChar
Sections
.ltuh Size: 429KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gsdy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.emkn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rqjc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ruwc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jmyf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qpfn Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.vwdw Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jddv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jmyc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE