Static task
static1
Behavioral task
behavioral1
Sample
ee9685f43dc9ee31c5ad809fdcba202a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee9685f43dc9ee31c5ad809fdcba202a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee9685f43dc9ee31c5ad809fdcba202a_JaffaCakes118
-
Size
18KB
-
MD5
ee9685f43dc9ee31c5ad809fdcba202a
-
SHA1
c78105804da60f060d8b8620dc32b7302d7bd1be
-
SHA256
b4bd589ac8a05ad436b93e541468711399aa37bf8b009eedc8d495e60c6e816b
-
SHA512
3054b038d4d8f8115c2008c387943e5a490d899d985862cf34ff98aea0ed9670cc48541f5cfc7c6afc352d4f6dee00ee361137d4888a4092568f1ada5f0fa5cc
-
SSDEEP
384:FwV/GotQoTGCcE7rfyQ6bHL0WnPYPVMWHvEJ2JeF2pP1MYFj:4/vHTGCcE7ryp/0OYPVMaEJ2DF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee9685f43dc9ee31c5ad809fdcba202a_JaffaCakes118
Files
-
ee9685f43dc9ee31c5ad809fdcba202a_JaffaCakes118.exe windows:4 windows x86 arch:x86
c66ef01892f32d422fdc098d1f2ab04f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DispatchMessageA
wsock32
accept
advapi32
GetSidIdentifierAuthority
shell32
SHGetSpecialFolderPathA
ole32
OleUninitialize
rasapi32
RasGetEntryDialParamsA
oleaut32
SafeArrayCreateVector
Sections
.text Size: 15KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE