Static task
static1
Behavioral task
behavioral1
Sample
eeab1b97fa9267299f70bc82c0675b5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeab1b97fa9267299f70bc82c0675b5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeab1b97fa9267299f70bc82c0675b5d_JaffaCakes118
-
Size
253KB
-
MD5
eeab1b97fa9267299f70bc82c0675b5d
-
SHA1
9e36df4597db5b6438f90289fb5e7797b0ac6f9d
-
SHA256
9f3ad2ed9580ebd6148ce9323181bf27dd3ee5b905971a75304c0e87214b4d61
-
SHA512
9606df346d22cf4191a5e09a58030c6923911617d60b2c959eb46b914a399ba612bb7f0ea85db576206900e1803ea9d2175b68c7e2c3a3ea146c7112ae4ed3b2
-
SSDEEP
6144:OTR60YtuZ1XTCZ1lsdYAyZgCRnXf9ae90wloVbJ:E6KXXTgVtmCRnP9ae90KE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeab1b97fa9267299f70bc82c0675b5d_JaffaCakes118
Files
-
eeab1b97fa9267299f70bc82c0675b5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
55db73c4b3c42b4186a90ac7f5d7f05d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFilePointer
ReadFile
lstrcatA
DeleteFileA
SetLastError
lstrcpyA
GetLastError
GetTempPathA
FindResourceA
LoadResource
CreateFileA
SizeofResource
lstrlenA
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentProcess
MultiByteToWideChar
GetWindowsDirectoryA
lstrcmpiA
CloseHandle
Sleep
GetModuleHandleA
ExitProcess
GetStartupInfoA
user32
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
wsprintfA
LoadCursorA
LoadIconA
MessageBoxA
advapi32
InitializeSecurityDescriptor
RegOpenKeyExA
RegSaveKeyA
RegCloseKey
RegRestoreKeyA
RegQueryValueExA
LookupAccountNameA
GetFileSecurityA
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CreateServiceA
OpenSCManagerA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
StartServiceA
OpenServiceA
CloseServiceHandle
msvcrt
_strrev
_strnset
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
strtok
memset
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3
memcpy
strchr
realloc
malloc
strlen
strcat
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ