Static task
static1
Behavioral task
behavioral1
Sample
eb3044f2a5f2e8c23324dbf4f9e233f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb3044f2a5f2e8c23324dbf4f9e233f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb3044f2a5f2e8c23324dbf4f9e233f5_JaffaCakes118
-
Size
46KB
-
MD5
eb3044f2a5f2e8c23324dbf4f9e233f5
-
SHA1
70e6e7c555f71514b7626102c97ca9b10bb16cfe
-
SHA256
d7b4ace36fb27949da38d4fc0d3a16718d71f02111455b5311303ed9b9836c55
-
SHA512
629eb7f4f0ba079ffcdf97b453017190186615364e94c011a1b8a98ed1ef6b2cf3f8e9b4e859434e33dface211b5705f705e4afdde77dbe9be5da404969ff520
-
SSDEEP
768:I/Ek3BUVumvBZM9+3gZu+/+LUBsDnETTVBNg0uMPZYscRr2q3HQ:a32dBZM9+GWUMn0hB0bRrH3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb3044f2a5f2e8c23324dbf4f9e233f5_JaffaCakes118
Files
-
eb3044f2a5f2e8c23324dbf4f9e233f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d84bc0a94e21bda8c2112e8178583f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetProcAddress
LoadLibraryW
VirtualAlloc
QueryPerformanceCounter
FreeLibrary
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentProcessId
SetLastError
GetTickCount
atl
AtlMarshalPtrInProc
ntdll
NtAddAtom
Sections
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ