Static task
static1
Behavioral task
behavioral1
Sample
eec449aefb655c1141a6cd076c829c0c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eec449aefb655c1141a6cd076c829c0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eec449aefb655c1141a6cd076c829c0c_JaffaCakes118
-
Size
182KB
-
MD5
eec449aefb655c1141a6cd076c829c0c
-
SHA1
4361ac64e3ae000463cb1254e6bbff0f99afb72f
-
SHA256
9f95208ed491e323ad85672188952cfc9561c224578c6ac5e1a5b57c27b81881
-
SHA512
84429cf0440cadcf2178e2165ed618feafff721a4a1993d52f990a26ffa858751a7f65c87bb6698ab1e5c1eb264bae5fc6f8eb25663e8ae36408dc5c8424d862
-
SSDEEP
3072:B4pkUtVvSDgb0KvY/ZkAT64i8WTZXmxzBIhVICTWt800nYQKFkEOYNd/MJ9:skUthbEkATJiBE4hVY8nBKGEOYNdEJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec449aefb655c1141a6cd076c829c0c_JaffaCakes118
Files
-
eec449aefb655c1141a6cd076c829c0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
644159b31191ea87691ca0aa71c1bc7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleKeyShortcuts
SetLastError
GetLastError
Module32NextW
CompareStringW
GetModuleHandleW
EnumUILanguagesA
GetSystemDefaultUILanguage
CreateIoCompletionPort
GetProfileStringA
EnumResourceNamesW
LocalLock
GetConsoleAliasW
GetCommandLineA
ExitProcess
GetStartupInfoA
user32
WINNLSGetEnableStatus
SetUserObjectInformationA
TrackPopupMenu
FrameRect
DefMDIChildProcW
GetProcessDefaultLayout
MessageBeep
InitializeLpkHooks
GetWindowTextLengthA
shell32
SHGetIconOverlayIndexA
gdi32
GetSystemPaletteEntries
GdiGetPageCount
GetROP2
GdiEntry1
GetICMProfileA
GdiEntry5
CreatePen
CreateEllipticRgn
UpdateColors
SetBkColor
GetLogColorSpaceW
SetMagicColors
GetMiterLimit
GetColorAdjustment
HT_Get8BPPFormatPalette
PathToRegion
UpdateColors
Sections
.code Size: 5KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE