Static task
static1
Behavioral task
behavioral1
Sample
2a90a4a2ce92eb3888e7598b83c21df6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a90a4a2ce92eb3888e7598b83c21df6_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2a90a4a2ce92eb3888e7598b83c21df6_JaffaCakes118
-
Size
311KB
-
MD5
2a90a4a2ce92eb3888e7598b83c21df6
-
SHA1
bd5cafe57cd80deaa0ec23168a1c2787a7a06647
-
SHA256
c5aec0db14f7d63e961a3708bc09a5451d581d20dd8630512fe206861deeaddb
-
SHA512
4d1775520a3ebb419436dfdeb1a7cf2771b5bec7da2273cdb478fb911cf678d54c8803f680fb5634b02e12e1f0f335cf7f1970ef905069b5cf48e2fe222d7655
-
SSDEEP
6144:aHaZau3czTmDAumEvnuvC1hlRruD1HUnkf58KsqngfiRTKID:U8cvEvnuvC1hlRrhkOKojID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a90a4a2ce92eb3888e7598b83c21df6_JaffaCakes118
Files
-
2a90a4a2ce92eb3888e7598b83c21df6_JaffaCakes118.exe windows:4 windows x86 arch:x86
a23cc25a7822e3eb3dcb0c62b158a36b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
SetFileAttributesW
GetModuleHandleW
lstrcpyA
lstrcatA
SetFileTime
InitializeCriticalSection
ReadFile
GetFileSize
HeapCreate
FormatMessageW
GetStartupInfoW
GetLocalTime
CloseHandle
IsBadWritePtr
GetLastError
FindResourceA
CreateMutexW
LeaveCriticalSection
SetFileTime
GetModuleHandleA
msi
MsiAdvertiseProductA
MsiCreateRecord
MsiCloseHandle
MsiCloseAllHandles
user32
PostMessageW
IsDialogMessageA
DispatchMessageA
IsZoomed
SetFocus
IsWindow
GetWindowTextA
PeekMessageW
wsprintfW
LoadCursorW
GetWindowLongW
GetWindowRect
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE