Static task
static1
Behavioral task
behavioral1
Sample
ebe8fbe97bf1a122dec998e7d01a133f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebe8fbe97bf1a122dec998e7d01a133f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebe8fbe97bf1a122dec998e7d01a133f_JaffaCakes118
-
Size
245KB
-
MD5
ebe8fbe97bf1a122dec998e7d01a133f
-
SHA1
46823fb7efc7e947c6ef6c2818bda7d475f6cd65
-
SHA256
b29698d9167286cd3a6d88ddbc98e1dd86fd41e5bedb53cf71d9c9ce204e2818
-
SHA512
83dfd4ea42130a29e22c7841c42b8d8b1ad1275c48fec4a55f7c08f4206a6dcd797272721605dc02509fa1143b7bd346bc2a1fc83d427bfb1152994a7a1a7863
-
SSDEEP
6144:YceEYYQ4g6+9VrqDVnEAEcVWQr6ukfo4oKPxPwNx:Yce94g6OVODVEMnrp2zwNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebe8fbe97bf1a122dec998e7d01a133f_JaffaCakes118
Files
-
ebe8fbe97bf1a122dec998e7d01a133f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c26c2d4db8dbdea3cd8a564c8cec084
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtPowerInformation
user32
GetLastInputInfo
SystemParametersInfoW
kernel32
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetProcessHeap
FindNextFileW
ProcessIdToSessionId
HeapFree
HeapDestroy
LoadLibraryExW
LoadResource
IsDebuggerPresent
lstrlenW
CreateFileW
SetUnhandledExceptionFilter
WaitForSingleObject
FileTimeToSystemTime
HeapSize
EnterCriticalSection
UnhandledExceptionFilter
ReadFile
OpenProcess
SetThreadExecutionState
SizeofResource
FindClose
WaitForMultipleObjects
CloseHandle
GetSystemInfo
GetFileSize
HeapReAlloc
FindResourceW
HeapAlloc
FindResourceExW
LockResource
GetLocalTime
FindFirstFileW
LeaveCriticalSection
RaiseException
DeleteCriticalSection
SystemTimeToFileTime
LocalFileTimeToFileTime
LocalFree
OutputDebugStringW
LocalAlloc
FreeLibrary
DisableThreadLibraryCalls
GetCurrentThreadId
DeviceIoControl
CreateThread
VirtualAllocEx
mscms
CreateColorTransformW
IsColorProfileTagPresent
CreateMultiProfileTransform
GetColorProfileElementTag
SetStandardColorSpaceProfileW
GetCMMInfo
UnregisterCMMW
CreateProfileFromLogColorSpaceW
UninstallColorProfileA
modemui
drvGetDefaultCommConfigA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.S Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.meqNSK Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AYHdRT Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CqXTjM Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 213KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reQkO Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ