Static task
static1
Behavioral task
behavioral1
Sample
game.exe
Resource
win7-20240903-en
General
-
Target
eb25e6f57b77b6c45d87a822dc929e5f_JaffaCakes118
-
Size
2.6MB
-
MD5
eb25e6f57b77b6c45d87a822dc929e5f
-
SHA1
ffa51c45c718d3e398b906bc505cae93d23aaec3
-
SHA256
a71377a0b0aabf3bdb2d9766b56fda69b0e532cb5fac87dcfca76e3c8b51c291
-
SHA512
4b4d489a3e3cc3a5346b101d17ab8ed7aaaf5ead688ce90498db57382b38a4a7a340b534f251b6e99ba5fda6f70856aa3968eb6e2c6520931521c531b97c0bbe
-
SSDEEP
49152:CEu0erVado7TzaCNaO5T51/B8MTVvmWx+W/ki4vaKnuHjy8US76A6Q8s2Qv3Rfw:CH0erVvfNf5//BJTBx5/ki4SjDy817+7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/game.exe
Files
-
eb25e6f57b77b6c45d87a822dc929e5f_JaffaCakes118.zip
-
game.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.3MB - Virtual size: 30.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vsskxuep Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eezyktmw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE