Static task
static1
Behavioral task
behavioral1
Sample
ebe90ed50a83987804b25d638149d073_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebe90ed50a83987804b25d638149d073_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebe90ed50a83987804b25d638149d073_JaffaCakes118
-
Size
308KB
-
MD5
ebe90ed50a83987804b25d638149d073
-
SHA1
30b7f8f90ed511f1dc148a7c9f014a15e42f2133
-
SHA256
102052528aa6f14d14803c5ed7756f21f9dd72bb5e4325312e237cb2e00a5dbe
-
SHA512
cf50f27e45b07f395c19486f487addf14c0ff0f890afe0d9f018d2c5c2e1d5114d71905f5d6ec3413a2b1726d066d97d64d472913d82aea4eb7ea67b2f0c00a9
-
SSDEEP
3072:O7zQZJ5PZe/sgjot67kJ1KZ/ocvR0EKBdhGtTBfdtLS8bCV:OHQr5RcV7kLIBvR1KBHGtTBPL2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebe90ed50a83987804b25d638149d073_JaffaCakes118
Files
-
ebe90ed50a83987804b25d638149d073_JaffaCakes118.exe windows:4 windows x86 arch:x86
005ef6720fa3a02bcd432d7f00daca16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetComputerNameA
DeleteFileW
SetFilePointer
Sleep
WriteFileEx
SetEndOfFile
OpenEventW
OpenThread
SetEvent
SetConsoleTitleW
WriteProfileSectionA
ResumeThread
OpenFileMappingA
SleepEx
ResetEvent
SystemTimeToFileTime
TlsAlloc
PulseEvent
SetFileTime
OpenEventA
OpenMutexA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
user32
SetWindowLongA
GetWindowTextA
SetWindowTextA
msvcrt
exit
_controlfp
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
memset
memcpy
_ftol
_CxxThrowException
_purecall
malloc
free
_exit
_XcptFilter
toupper
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ