Static task
static1
Behavioral task
behavioral1
Sample
eeab196173b97cbeabfc8b6756c9fe34_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eeab196173b97cbeabfc8b6756c9fe34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeab196173b97cbeabfc8b6756c9fe34_JaffaCakes118
-
Size
415KB
-
MD5
eeab196173b97cbeabfc8b6756c9fe34
-
SHA1
fe7560d22163187efcf8f763e2d0fd9d385f6f7d
-
SHA256
c8c45b7f615229bd84b9b3f765426b22269011219c3fc10cc11131627edfed21
-
SHA512
1e2c19aabda8d26fde2a4ed2323067cc874881e850c299c29757f386ceeb6eeef9bdcd4258ffa798157a944482f2cb9f08c692508b72bc3346f893a01b8b32a3
-
SSDEEP
6144:e1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:eKowTWTq4yzd/tS7U8tEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeab196173b97cbeabfc8b6756c9fe34_JaffaCakes118
Files
-
eeab196173b97cbeabfc8b6756c9fe34_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7cfb548c15ac3d008616f3e5aa912d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetACP
HeapCreate
RaiseException
Sleep
LoadLibraryExA
GetCommandLineA
LockResource
GlobalAddAtomA
GetFileAttributesA
GlobalFree
GetLogicalDrives
CloseHandle
SetErrorMode
GetSystemDirectoryA
GetLocaleInfoA
InterlockedExchange
VirtualProtect
GetLastError
GetStdHandle
GlobalDeleteAtom
user32
GetMenuItemInfoA
GetActiveWindow
IsIconic
wsprintfA
GetFocus
BeginPaint
ValidateRect
GetClassNameA
ReleaseDC
GetCursorPos
EndPaint
FrameRect
GetParent
DrawEdge
DrawTextA
GetWindow
SetForegroundWindow
GetWindowTextA
ShowWindow
httpapi
HttpRemoveUrl
HttpTerminate
HttpInitialize
HttpAddUrl
HttpCreateHttpHandle
wshtcpip
WSHNotify
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ