Static task
static1
Behavioral task
behavioral1
Sample
ee99ff258923885ea0f2c6710e4ee45b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ee99ff258923885ea0f2c6710e4ee45b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee99ff258923885ea0f2c6710e4ee45b_JaffaCakes118
-
Size
45KB
-
MD5
ee99ff258923885ea0f2c6710e4ee45b
-
SHA1
b698b48f3b447db7e0e88814fccbde90769d098d
-
SHA256
142e2c6c06a547b605c92d5f15a5ea57fa616fbaf241c6b4663b0ba967cc4c1b
-
SHA512
92e370a33e75436bd59e3dfac80a8fffc0b4dc8987f9dbf02c54c0097f1fb50e733a1d15012172b7f068661b45a7add5f650813b28f1706f641f4612f2c64331
-
SSDEEP
768:C3z3DNVNe7zOTp+ZqwH9ekECoqwyYE/zQLjvSyDnZ1WY/GvV1zdYqjeikxLd:C3z3DppI/H9HoyYpjDn8XHjzkx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee99ff258923885ea0f2c6710e4ee45b_JaffaCakes118
Files
-
ee99ff258923885ea0f2c6710e4ee45b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0d5a15991fbbee70da0f6fdf7e75a36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent
user32
wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE