Static task
static1
Behavioral task
behavioral1
Sample
eebf005799aec0c9a26a1794caaf6a99_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eebf005799aec0c9a26a1794caaf6a99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eebf005799aec0c9a26a1794caaf6a99_JaffaCakes118
-
Size
24KB
-
MD5
eebf005799aec0c9a26a1794caaf6a99
-
SHA1
b25bd48285bd53b1779664ca16b11abb3b933d04
-
SHA256
93954c1c3406f801ab8617b1740b1fde7df2eec2288c1af38c901537932fad90
-
SHA512
55e1443ea4bca3b685fcdd4216a0ca195eb38106010010e1d95265c15cf1ca1adeb9451ffe37d2b97e0c0466a859c01887e7237766e4f9ae2eef5d0502e15173
-
SSDEEP
384:t11Dn4Y/bpIXbdXik9caOcv70ZkF+a0jNM0GyNHkoHs96GY/Ms/AL7vvxlLdW4BS:/1D4Y/VIZXi2pv4iAfuwEnoGYE57DXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eebf005799aec0c9a26a1794caaf6a99_JaffaCakes118
Files
-
eebf005799aec0c9a26a1794caaf6a99_JaffaCakes118.exe windows:6 windows x86 arch:x86
4a6042e36a160cd0e71d84a14917afcc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
msvcrt
exit
ntdll
RtlGetUILanguageInfo
input
ord107
user32
CharNextW
Sections
.MPRESS1 Size: 19KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE