Static task
static1
Behavioral task
behavioral1
Sample
eb6e263bc0323ad9bc893b56b8950b5f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb6e263bc0323ad9bc893b56b8950b5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb6e263bc0323ad9bc893b56b8950b5f_JaffaCakes118
-
Size
64KB
-
MD5
eb6e263bc0323ad9bc893b56b8950b5f
-
SHA1
099bb79537dba01b85a78a64f4e4914c3fc42de2
-
SHA256
980dec190eb3349d0eac82d7d5044f3bdab9f58850e09041f68a71c2123765fe
-
SHA512
7db92db18cbf6e93e04058112ccbd6461c36e19a77ead0b1ad93ac1b9590340b635c1c6b34b3de3bae734a44a7a134262634fb398326aa5f13ddf045b6ed9007
-
SSDEEP
768:IwWekslqAwNKLNIuH3f3YfgFcZLhf3Qo5WFlXMKAJC8fZ8oeV4m:IwtkshWjgFcZLxHql8KUKok4m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb6e263bc0323ad9bc893b56b8950b5f_JaffaCakes118
Files
-
eb6e263bc0323ad9bc893b56b8950b5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
54b2035b5c3a06ba7f24e3da7015fcf7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
GetProcAddress
Sleep
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
HeapFree
GetLastError
CloseHandle
HeapAlloc
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
SetFilePointer
FlushFileBuffers
SetStdHandle
CreateFileA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
ReadFile
SetEndOfFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE