Static task
static1
Behavioral task
behavioral1
Sample
ef8de82402348e7c0db8fa1902aa56db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef8de82402348e7c0db8fa1902aa56db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef8de82402348e7c0db8fa1902aa56db_JaffaCakes118
-
Size
44KB
-
MD5
ef8de82402348e7c0db8fa1902aa56db
-
SHA1
7f5a49eff632ac8b956aaa58489563b28448899d
-
SHA256
e01bbb92a39a28723f98ff7bf0fa61258302a9d085e4aa3108172044655aaabf
-
SHA512
451dd942e0a987a5ac946ac63f508a66dc4e93fd03a82b3542bcd769789d839e2b4522a434d4fbbf774f1f9557cf04624e99f53b6846fda7551bf6a1a343d1b8
-
SSDEEP
384:PGbKMeKFhmPiQV8eT7Q3+IEeZaKb+pFNZIOc3NeJQaUZuA6bUGlO7xCL8vJb7QHB:AnhmPZPTsDbZ7wAFZ0bxOYL817Q0p/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8de82402348e7c0db8fa1902aa56db_JaffaCakes118
Files
-
ef8de82402348e7c0db8fa1902aa56db_JaffaCakes118.exe windows:4 windows x86 arch:x86
5090fe4dfe15b3b857d7d6611e283fdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_XcptFilter
_exit
_cexit
__getmainargs
memcpy
_ismbblead
sprintf
_strcmpi
strtok
strlen
?terminate@@YAXXZ
strstr
memset
malloc
strcpy
strcat
atoi
free
urlmon
URLDownloadToFileA
wininet
InternetGetCookieExA
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
WritePrivateProfileStringA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
LoadLibraryA
GetProcAddress
FreeLibrary
GetPrivateProfileStringA
FindResourceA
LoadResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
LocalAlloc
LocalFree
WideCharToMultiByte
GetTempPathA
user32
TranslateMessage
DispatchMessageA
GetDesktopWindow
PeekMessageA
advapi32
RegQueryValueExA
AllocateAndInitializeSid
SetEntriesInAclA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
FreeSid
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
shell32
ShellExecuteA
SHChangeNotify
SHGetSpecialFolderPathA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ