Static task
static1
Behavioral task
behavioral1
Sample
eec85339c8e45c46ade54ec35f832dda_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eec85339c8e45c46ade54ec35f832dda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eec85339c8e45c46ade54ec35f832dda_JaffaCakes118
-
Size
117KB
-
MD5
eec85339c8e45c46ade54ec35f832dda
-
SHA1
85cdfb56a9b5cf00d41a4d131a579276f05e96d5
-
SHA256
61d80a39eb2b1c1665b28f7565727c9a928893c795c564644b48b8fddb7cc167
-
SHA512
460b0dc9e0a8f2427342afa202bf94ec4c3750ca668f8c7d6a629a0315979f8b97814ce678ba3022eaac5b26b8617ca8014944d21a528318a7f70b03d768b9ad
-
SSDEEP
3072:1OwdafcLWmGmPXvvuFd+iqPBvBf97RBZXzVEBe2:1tda4trP/mGNP9Bf77jSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec85339c8e45c46ade54ec35f832dda_JaffaCakes118
Files
-
eec85339c8e45c46ade54ec35f832dda_JaffaCakes118.exe windows:4 windows x86 arch:x86
92aafccbdca686f17ed31964413869e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckRadioButton
GetWindowTextA
GetParent
SetWindowLongA
GetClientRect
UpdateWindow
EnableWindow
GetDlgItem
PostMessageA
GetWindowLongA
CreateWindowExA
LoadCursorA
SetCursor
SendMessageA
MessageBoxA
SetPropA
RemovePropA
GetPropA
kernel32
GetModuleHandleA
GetStartupInfoA
GetProcAddress
LoadLibraryA
msvcr71
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_strupr
fprintf
_iob
malloc
free
sprintf
sscanf
memset
wcscpy
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
comctl32
PropertySheetA
CreatePropertySheetPageA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mkzeezk Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE