Static task
static1
Behavioral task
behavioral1
Sample
eb7bc5d147cabca74251816f47f48d8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb7bc5d147cabca74251816f47f48d8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb7bc5d147cabca74251816f47f48d8d_JaffaCakes118
-
Size
167KB
-
MD5
eb7bc5d147cabca74251816f47f48d8d
-
SHA1
127210d2e995e0090afb296528945bde5f62e2eb
-
SHA256
3e840a262e0f2057b3fb1fa429b2fdb84468b8feacaf441fa5db96f33480494c
-
SHA512
a7dd65934b96b5be3e6b17cdb477f1f3042a37649267b281b0c5340d0c294bd7f7b3fb07f444393c5c6d0a781a4df0fa7f6534948cc571823cea8d200a473b7c
-
SSDEEP
3072:sY3orUjJw78DyAhplxgv5NlZZxCoA+Z6HqKZRjmKx+:xsfTBzAS6H53+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb7bc5d147cabca74251816f47f48d8d_JaffaCakes118
Files
-
eb7bc5d147cabca74251816f47f48d8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
f75c157738ded2e3e2e9124dd8d06cd1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
QueryPerformanceCounter
GetVersion
MulDiv
GetDriveTypeA
DeleteFileA
GetCurrentThreadId
GetCurrentProcessId
GetOEMCP
GetWindowsDirectoryA
GetTickCount
GetProcessHeap
GetACP
IsDebuggerPresent
GetThreadLocale
lstrcmpiA
GetConsoleOutputCP
SetCurrentDirectoryA
GetCurrentThread
VirtualAlloc
GlobalFindAtomA
GetCurrentProcess
VirtualFree
GetUserDefaultLangID
DeleteFileW
GlobalFindAtomW
lstrcmpA
GetStartupInfoA
lstrlenW
GetModuleHandleW
lstrlenA
CopyFileA
lstrcmpiW
RemoveDirectoryA
GetCommandLineW
gdi32
CreatePen
SaveDC
GetDeviceCaps
GetTextMetricsA
DeleteDC
PatBlt
SelectPalette
SelectObject
DeleteObject
GetStockObject
CreatePalette
SetTextColor
CreateSolidBrush
CreateCompatibleDC
LineTo
SetMapMode
SetStretchBltMode
SetTextAlign
RestoreDC
CreateFontIndirectA
GetObjectA
GetPixel
GetClipBox
RectVisible
user32
GetParent
GetSystemMetrics
CharNextA
GetDC
TranslateMessage
GetDesktopWindow
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Drxpccfw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Tdfpqt B Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ