_ZHfzzU5GKi@16
Static task
static1
Behavioral task
behavioral1
Sample
eba98e16df901981c44ff164c444289e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eba98e16df901981c44ff164c444289e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eba98e16df901981c44ff164c444289e_JaffaCakes118
-
Size
77KB
-
MD5
eba98e16df901981c44ff164c444289e
-
SHA1
81d28ec01c33adab06950a6db7dbbf1bd875a2f4
-
SHA256
215475b24ea05878e95c2d8e73d3f48583b5485a1d1dedcb29ff8ecc00b0e0d8
-
SHA512
997e3f1742fc86019d2fef141044f5349e1722b902f3cd2b7fe3e42b178fb3f362078b185aaf8143a3d8333c6b0d7e45fa522d5dfe69972d88c82cf610eea8bd
-
SSDEEP
1536:qgCruDV/Rfjw1KUE6KAJFeOm0zZx6WswnDCvIt:YqDV/5jwyGJEOm66WswnMIt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba98e16df901981c44ff164c444289e_JaffaCakes118
Files
-
eba98e16df901981c44ff164c444289e_JaffaCakes118.exe windows:4 windows x86 arch:x86
62a1a5663ee28b67bb9cccecdd021f18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcschr
time
memcpy
atol
exit
memmove
swprintf
clock
calloc
rand
user32
GetMenu
TranslateMessage
LoadBitmapA
TrackPopupMenu
TranslateMDISysAccel
KillTimer
comctl32
ImageList_Write
ImageList_Create
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_GetBkColor
ImageList_DragShowNolock
kernel32
ExitProcess
GetCurrentThreadId
GetStartupInfoA
VirtualAllocEx
lstrcpynA
GetDateFormatA
ReadFile
SetLastError
LoadLibraryA
GetTickCount
FreeResource
WideCharToMultiByte
CompareStringA
lstrlenA
LocalAlloc
GetStdHandle
GetCommandLineW
GetCPInfo
ExitThread
GetStringTypeA
LockResource
GetThreadLocale
SetEvent
GetProcAddress
Exports
Exports
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lkdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 512B - Virtual size: 473B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ