Static task
static1
Behavioral task
behavioral1
Sample
eee0c2736262bca3a04e2e9bee9ad249_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eee0c2736262bca3a04e2e9bee9ad249_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eee0c2736262bca3a04e2e9bee9ad249_JaffaCakes118
-
Size
31KB
-
MD5
eee0c2736262bca3a04e2e9bee9ad249
-
SHA1
0ece3ff5e923f535ac00c16ad6a4c71cacf9bddd
-
SHA256
6e9cdb4ac35f7e6cab15fb48b365c03c8321b369f8eb2141d6a833c5766b99cd
-
SHA512
74d1bc24c85bab5ac5c07b638c29b96286ca62c196d10b105133ad755d95c00720ff7e1339ad11dc80b1e7fb7a3df39861a3774115b04793cda4669d9b7d2929
-
SSDEEP
384:QMTwU6f2asaQRwamfymoNvFf0/7P1LVG0Qrn219R+yskkqchTmh1pV7GPnLupMT:/wAt2tvgF+z1wDr2194y0WHv7mLz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee0c2736262bca3a04e2e9bee9ad249_JaffaCakes118
Files
-
eee0c2736262bca3a04e2e9bee9ad249_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e8c2100639dcaa175ab8d544a2907ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyn
SetFileAttributesA
GetTapeParameters
FreeConsole
OpenWaitableTimerA
FindNextFileA
CompareFileTime
GetVolumePathNameA
GetCompressedFileSizeA
GetConsoleAliasesLengthA
VirtualAlloc
GetSystemWindowsDirectoryA
SetHandleInformation
SetConsoleDisplayMode
GlobalFix
GetLongPathNameA
GetQueuedCompletionStatus
DisableThreadLibraryCalls
IsBadStringPtrA
TermsrvAppInstallMode
VirtualQueryEx
lstrcpynA
OpenJobObjectA
SetCurrentDirectoryA
GetCommandLineA
GetMailslotInfo
SetProcessShutdownParameters
CreateFileMappingA
GetProcessTimes
EnumSystemGeoID
ExpandEnvironmentStringsA
SetCalendarInfoA
SetConsoleTitleA
IsWow64Process
WritePrivateProfileSectionA
GetConsoleWindow
RemoveDirectoryA
GetLogicalDriveStringsA
OpenEventA
FreeResource
GetDllDirectoryA
FindFirstVolumeMountPointA
GetComputerNameA
EnumSystemCodePagesA
GetProcessIoCounters
WriteFileEx
GetThreadPriority
FindCloseChangeNotification
EnumSystemLanguageGroupsA
ReplaceFileA
MultiByteToWideChar
GetTickCount
GetSystemTimeAdjustment
GetUserDefaultUILanguage
WinExec
GetFileSizeEx
GetFullPathNameA
GlobalFindAtomA
AddAtomA
GetThreadPriorityBoost
EndUpdateResourceA
GetStartupInfoA
ClearCommBreak
WriteConsoleOutputAttribute
WriteProcessMemory
GetVolumeNameForVolumeMountPointA
GetDiskFreeSpaceExA
TransmitCommChar
ReadConsoleA
GetSystemDefaultUILanguage
LocalHandle
SetPriorityClass
SetFileTime
SetEndOfFile
GlobalUnfix
BuildCommDCBA
GlobalSize
SetErrorMode
ResetEvent
EnumResourceTypesA
GetWindowsDirectoryA
GetConsoleCharType
PeekConsoleInputA
FindResourceA
IsBadCodePtr
GetConsoleAliasExesLengthA
TransmitCommChar
WaitForSingleObject
GetTapeStatus
FlushViewOfFile
GlobalGetAtomNameA
GetSystemDirectoryA
GetProcessId
SetDllDirectoryA
GetDefaultCommConfigA
GetConsoleCP
DeleteAtom
OpenThread
GetThreadContext
LocalShrink
ReadConsoleA
SetVolumeMountPointA
GetCommTimeouts
QueryPerformanceCounter
LZCopy
user32
PrivateExtractIconsA
DestroyWindow
MessageBoxIndirectA
CreateDesktopA
LoadMenuIndirectA
ShowWindow
EndDeferWindowPos
RegisterTasklist
GetFocus
GetUpdateRgn
GetLastInputInfo
SetDlgItemInt
CharToOemBuffW
GetTabbedTextExtentA
ShowOwnedPopups
SetDlgItemTextA
SetClassLongA
LoadMenuIndirectA
RegisterClipboardFormatA
PackDDElParam
RealGetWindowClassA
CheckDlgButton
OemToCharBuffA
TileWindows
CharPrevExA
GetClipboardOwner
GetWinStationInfo
GetParent
MapVirtualKeyExW
SetMessageQueue
FrameRect
PrivateExtractIconExA
QuerySendMessage
ActivateKeyboardLayout
GetSysColor
GetWindowWord
OemToCharA
RegisterUserApiHook
CloseWindow
DlgDirListComboBoxA
MapDialogRect
GetReasonTitleFromReasonCode
GetWindow
EnableWindow
GetProcessDefaultLayout
UnregisterHotKey
IsCharAlphaNumericW
CallMsgFilterA
DrawTextExW
SendDlgItemMessageA
SetWindowLongA
CheckMenuItem
IntersectRect
SetCursorContents
EndTask
PostMessageA
GetClassInfoA
CreateWindowStationW
GetKeyboardLayoutNameA
GetMessageTime
SetMenuContextHelpId
DlgDirSelectComboBoxExA
EndPaint
GetCaretBlinkTime
GetMouseMovePointsEx
IsZoomed
GetIconInfo
PrivateExtractIconsA
EqualRect
GetWindowRgnBox
MonitorFromPoint
RegisterTasklist
SetWindowsHookA
EnableMenuItem
TrackPopupMenuEx
AppendMenuA
FindWindowExA
UnregisterClassA
IsCharLowerA
FrameRect
GetWindowModuleFileNameA
GetTabbedTextExtentA
SetMenu
SetMenuItemInfoA
GetMenuItemRect
SetProcessWindowStation
CharPrevExA
SetPropA
RegisterWindowMessageA
RemovePropA
CharPrevExA
UnregisterClassA
GetDlgCtrlID
EndMenu
QuerySendMessage
TranslateMessage
GetProgmanWindow
DrawFocusRect
GetLastActivePopup
CheckMenuRadioItem
GetClassLongA
GetClassInfoExA
dhcpsapi
DhcpEnumServers
d3d8
CheckFullscreen
DebugSetMute
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE