Static task
static1
Behavioral task
behavioral1
Sample
2215b7b02f7a6706dc61a042b051c961_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2215b7b02f7a6706dc61a042b051c961_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2215b7b02f7a6706dc61a042b051c961_JaffaCakes118
-
Size
48KB
-
MD5
2215b7b02f7a6706dc61a042b051c961
-
SHA1
564b8eb0ccaaa2aee4dc58414b46bc558071dbec
-
SHA256
b8d7cb1a6cff33fd30d458c935253251ebbc88b0811e5a028cd615206e72a05e
-
SHA512
b9a5933ee62fc1afb94ad63599257c7febc00c28ec23aea25f871d0885e1e0887e6816eb00d6c47b583be62970ad57d41dc5cdfe5b4c1cb667cc0ab61793239a
-
SSDEEP
768:ECueZ68tC+u1CUWm3qFOdxfW04ci4kwKuSg8Ft1cqRb2gpXBaWwJjWdPii4J5IyW:EReZDCRViOJ6wKuSn5KwZi8y2ytMv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2215b7b02f7a6706dc61a042b051c961_JaffaCakes118
Files
-
2215b7b02f7a6706dc61a042b051c961_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b00af5f4e9ebf136e81bc9b13bd2b60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
ArrangeIconicWindows
CharUpperA
GetClassLongA
IsIconic
CharNextA
DestroyIcon
FlashWindow
RegisterWindowMessageA
ShowWindow
UpdateWindow
CharLowerA
GetSysColorBrush
SetTimer
GetMessagePos
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
GetParent
kernel32
GetConsoleCP
lstrlenA
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
Sleep
GetLastError
FreeLibrary
GlobalFindAtomA
GetCommandLineA
FindResourceA
CopyFileA
OutputDebugStringA
GlobalAddAtomA
GetProcAddress
shell32
DragFinish
ShellAboutA
gdi32
SelectObject
CreateCompatibleDC
SetTextColor
GetObjectA
DeleteDC
DeleteObject
SetBkColor
EndPage
CreateSolidBrush
ole32
CoFreeUnusedLibraries
CoFreeAllLibraries
CoGetCurrentProcess
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ