Static task
static1
Behavioral task
behavioral1
Sample
eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118
-
Size
31KB
-
MD5
eeb7f070cc024fb2259c5dd9357c3367
-
SHA1
a6238b9a548a17d4d1b706ca7eb3e3312f9093a8
-
SHA256
690e2d909fde4ddfdc04b253337f17aa1b0f502d6b9056e13e73858e01a7fac5
-
SHA512
d3fcf10f8379cb69c9395194604a1c50f85f8ef4cda3880c8f4636cf3cd6011ec73692ba591c6425bc06a43b44497be7af3d7e7537332fe001a83a784c81907e
-
SSDEEP
768:QP5ikSbnsjxWhTQ5rV493SPaOWE/gfWIOkCS:UjxWe4Sr1KWI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118
Files
-
eeb7f070cc024fb2259c5dd9357c3367_JaffaCakes118.exe windows:4 windows x86 arch:x86
b77e435961c58f3ecab01545f695d405
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetConsoleAliasesLengthA
CreateProcessInternalA
ReadConsoleInputExA
Thread32First
GetUserDefaultLangID
SetPriorityClass
BindIoCompletionCallback
GetCompressedFileSizeW
FreeLibraryAndExitThread
CompareStringA
GetCurrentDirectoryW
DuplicateHandle
FindFirstFileA
CreateMailslotA
GetModuleFileNameW
MulDiv
SetFileApisToANSI
DnsHostnameToComputerNameW
InterlockedExchange
MultiByteToWideChar
WritePrivateProfileStructA
OpenFileMappingA
GetCurrentConsoleFont
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ