Static task
static1
Behavioral task
behavioral1
Sample
ebade4e25565aed29a036143329ea07c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebade4e25565aed29a036143329ea07c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebade4e25565aed29a036143329ea07c_JaffaCakes118
-
Size
282KB
-
MD5
ebade4e25565aed29a036143329ea07c
-
SHA1
d6600790783cd70a830b5f7b232b74adf5934cc8
-
SHA256
f9909143fa6c1191256eddcbaf3f29ce1a05b9eae5d9c5920bfa0bc67336393d
-
SHA512
8d29e2c74fcb7b49f0aafea74a7c33a39ea5d8199f8b291a68d814ed2d3df7cb46bdd70a71f5a04f6d5efe0d109e3055c6f15c0ea752957f6f10a11487005c07
-
SSDEEP
6144:2oIlDqJXXZhhr5vdaLNU/ATS1JFUTzzt/9qoRGJL4:gZqpj/VaLu4GvFuzt1qYgL4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebade4e25565aed29a036143329ea07c_JaffaCakes118
Files
-
ebade4e25565aed29a036143329ea07c_JaffaCakes118.exe windows:4 windows x86 arch:x86
a08bd3429d69ac5119931522e648a43e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualAlloc
VirtualFree
OpenEventA
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
oleaut32
OleSavePictureFile
OleCreatePropertyFrame
SafeArrayGetRecordInfo
SysReAllocStringLen
OleLoadPictureFileEx
CreateTypeLib
OleLoadPictureFile
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 176KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ