Static task
static1
Behavioral task
behavioral1
Sample
eec01086f89dc55e13ec3a9ec7bb9ab6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eec01086f89dc55e13ec3a9ec7bb9ab6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eec01086f89dc55e13ec3a9ec7bb9ab6_JaffaCakes118
-
Size
168KB
-
MD5
eec01086f89dc55e13ec3a9ec7bb9ab6
-
SHA1
4cc955150dbfd63c538e4efa60fa898d5cc2b89a
-
SHA256
49f8f2efc8282dcd4b977beca1b34dafb54c094f7b0f2f842fd3443809dd691a
-
SHA512
b9873b806fa305833172112fdebebd860f7f4cfdef06439bbbe5031afa7f41aae0d22d5ce502bcd60a3631cc024f16b4ba6f2cdcaae911e00ab77b8fa3673846
-
SSDEEP
3072:9WD56oFAQetbYsnLy3J4GEh55D7w6DdKcY4DfkwD3THEOHyj:AD5HAvYsnLy3JM3DsH4DfkwD34j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec01086f89dc55e13ec3a9ec7bb9ab6_JaffaCakes118
Files
-
eec01086f89dc55e13ec3a9ec7bb9ab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb853c210dff5b91ea91f24cc2f2f90c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcAddress
LoadLibraryA
lstrcatA
VirtualAlloc
Sleep
GetModuleHandleA
CloseHandle
lstrcmpiA
CreateToolhelp32Snapshot
ExitProcess
ReadFile
SetFilePointer
CreateFileA
FreeResource
WriteFile
lstrlenA
SizeofResource
LoadResource
lstrcpyA
GetTickCount
SetLastError
DeleteFileA
GetLastError
MoveFileA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
GetFileAttributesA
CreateThread
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
GetCurrentThreadId
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
HeapReAlloc
RtlUnwind
GetStartupInfoA
GetVersion
HeapFree
VirtualFree
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ