Static task
static1
Behavioral task
behavioral1
Sample
eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118
-
Size
218KB
-
MD5
eefdb86c4358e31dab44a76a2b665de3
-
SHA1
9a346d81e8c9b310455b597f8cf06340522ebfe9
-
SHA256
cacceed08e3d1ae295f9c5ed321f6c50be21eb709dac269f360626610b465fa2
-
SHA512
bd33af35ddd9c99501df001cc5af2c97716551c470783b373833430ca3507f5dc243f1ba571adc1bc705cc55cd5e57169fe56c06f8a7003e282995da28f14845
-
SSDEEP
3072:iBC++ywahrekkgPBf1UG5J5lz8EkMg8mgkZoP5CB3iPejaj0WTYd+NCHVSZVFDA:iCbv2rekNzUG/5g0TB8b+0EYwlvDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118
Files
-
eefdb86c4358e31dab44a76a2b665de3_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6f94d9719359700a4e710d9cb5160aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleFontInfo
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
oleaut32
DispInvoke
CreateErrorInfo
OleSavePictureFile
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
wininet
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile
Sections
.text Size: 138KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE