Static task
static1
Behavioral task
behavioral1
Sample
eedc5d1eccb622fb9ee33811afa7ef68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eedc5d1eccb622fb9ee33811afa7ef68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eedc5d1eccb622fb9ee33811afa7ef68_JaffaCakes118
-
Size
115KB
-
MD5
eedc5d1eccb622fb9ee33811afa7ef68
-
SHA1
db35aa8bc7a7c30a7a28febbb01f199fd54509ed
-
SHA256
6923c4dc7b5047435a65167961f439b24ab7192b3d335968a9426f27d5d70106
-
SHA512
3f02a3f3c283ba90be4dd52fbc08bfffa05c1fc5c47accc3b163261657aba0ba4c6544ac6a995c54c67c2cc3c5c9a23f256c442dc5ef77ebc3f0bd2368259988
-
SSDEEP
3072:rvkGO9TMGNG0WycxnvdwOxQZbGL6msFhx2DmtA2:TkGmMGky+iO+GCh0Doz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eedc5d1eccb622fb9ee33811afa7ef68_JaffaCakes118
Files
-
eedc5d1eccb622fb9ee33811afa7ef68_JaffaCakes118.exe windows:4 windows x86 arch:x86
df16d0d50d9f0595e8777c3d17b69923
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFileOperationA
SHGetFolderPathA
Shell_NotifyIconA
user32
FrameRect
DrawIcon
MapVirtualKeyA
AdjustWindowRectEx
RemoveMenu
MapWindowPoints
SetScrollPos
GetSystemMenu
GetDC
GetMenuItemInfoA
DefWindowProcA
PostQuitMessage
IsWindowEnabled
MsgWaitForMultipleObjects
GetCursorPos
EqualRect
IsRectEmpty
GetSysColorBrush
GetSystemMetrics
GetSubMenu
InflateRect
GetTopWindow
GetKeyboardLayout
GetSysColor
GetFocus
RemovePropA
RegisterClassA
OffsetRect
ScreenToClient
CharLowerBuffA
SetFocus
DrawEdge
ShowScrollBar
UnhookWindowsHookEx
GetMenu
CallNextHookEx
GetActiveWindow
GetKeyState
PostMessageA
CreateMenu
DestroyWindow
IsWindowVisible
RegisterWindowMessageA
GetMessagePos
InvalidateRect
DrawTextA
UnregisterClassA
PeekMessageA
SetParent
GetWindowLongW
InsertMenuItemA
GetWindowPlacement
GetWindowDC
SetCapture
GetKeyboardLayoutNameA
OpenClipboard
DrawAnimatedRects
DrawMenuBar
LoadBitmapA
ShowWindow
GetClassLongA
EnumWindows
GetLastActivePopup
IsIconic
InsertMenuA
GetScrollPos
IsDialogMessageW
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
gdi32
BitBlt
SetBkColor
CopyEnhMetaFileA
LineTo
GetPaletteEntries
CreateBrushIndirect
GetRgnBox
SetBkMode
GetBitmapBits
SetPixel
kernel32
lstrcmpA
GetFullPathNameA
GetVersionExA
DeleteFileA
GetProcessHeap
ReadFile
CloseHandle
GetLocalTime
ExitThread
CreateThread
GetStringTypeW
LocalFree
VirtualAllocEx
GetProcAddress
LocalAlloc
GetFileType
GetModuleHandleA
VirtualAlloc
GetFileAttributesA
RaiseException
GlobalAlloc
GetCurrentProcess
GetLocaleInfoA
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 731B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ