Static task
static1
Behavioral task
behavioral1
Sample
eb859d2c3b02535cfaef56e2c315688b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb859d2c3b02535cfaef56e2c315688b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb859d2c3b02535cfaef56e2c315688b_JaffaCakes118
-
Size
130KB
-
MD5
eb859d2c3b02535cfaef56e2c315688b
-
SHA1
952c28594d4eb916b3180e64b569c5f8bd3a48a5
-
SHA256
3e6fa32dc5cf589a34487d2835ea7e8d9e7babb8ae2dae8602941d965f52a10d
-
SHA512
20c55e9eb65019ac6b284e4a5547f109c4c89e774fde999a3d427ac49f1315af96799ac8baf58406796a9bae1df6b9ea814541ba0c208abbff0bb95ab86f287e
-
SSDEEP
3072:BEkqIlTuuhI6REvIVaQiC7qP959s7PWVrA4byCW8:KiTzD+159s7+W4GC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb859d2c3b02535cfaef56e2c315688b_JaffaCakes118
Files
-
eb859d2c3b02535cfaef56e2c315688b_JaffaCakes118.exe windows:4 windows x86 arch:x86
27febde8c0e72506f0c43a78cf4a76d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
wtsapi32
WTSQueryUserToken
WTSLogoffSession
WTSCloseServer
secur32
QuerySecurityPackageInfoW
InitializeSecurityContextW
QueryContextAttributesW
RevertSecurityContext
FreeContextBuffer
kernel32
LockFile
LoadLibraryA
GetProcAddress
GetModuleFileNameA
WriteFile
RtlUnwind
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetShortPathNameW
GetEnvironmentVariableW
ResetEvent
FindFirstChangeNotificationW
DeleteFileW
OpenMutexW
CreateMutexW
FlushFileBuffers
CreateThread
LocalFree
LocalAlloc
WriteConsoleW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapFree
Sleep
UnlockFile
GetLastError
CloseHandle
GetFileType
CreateFileW
GetModuleHandleA
GetStartupInfoW
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetFilePointer
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
ReadFile
UnhandledExceptionFilter
GetModuleFileNameW
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 626KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE