Static task
static1
Behavioral task
behavioral1
Sample
2323a57622583d8bf8aecbd89ff97295_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2323a57622583d8bf8aecbd89ff97295_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2323a57622583d8bf8aecbd89ff97295_JaffaCakes118
-
Size
217KB
-
MD5
2323a57622583d8bf8aecbd89ff97295
-
SHA1
58230db3646b75c71f4750632dec1738a5d9f530
-
SHA256
1122e9aa1c64cab8a23b39e161f667bcec2975d910c328ad96cbaf49c24326a1
-
SHA512
ad4c5a9db7fbb2db8af07aaa8c1f242018700a21890a89291ed8a836604035120301790d87ca63f4a61a6426a630cbe6cf7f78c068649228f960838cbc81a2e3
-
SSDEEP
3072:5iX3XfI/D9DS32rDTcj+kjQrDZIkowrds27lBtRPI96qEZAbTkoVRHI:5W3w/82rAtjQrDlrd7thEBnk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2323a57622583d8bf8aecbd89ff97295_JaffaCakes118
Files
-
2323a57622583d8bf8aecbd89ff97295_JaffaCakes118.exe windows:4 windows x86 arch:x86
0bd5c76eebb7272e921f6ae8a0725626
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GlobalLock
FindAtomA
GetStdHandle
GetVolumePathNameA
CreateJobSet
ExitProcess
VirtualAlloc
GlobalFree
GlobalFlags
GetModuleHandleA
EnumDateFormatsA
EnterCriticalSection
GetUserDefaultLangID
LocalHandle
GetTapeStatus
GetProfileIntA
CreateMailslotA
CloseHandle
GetProcessHeap
GetProfileStringA
user32
GetFocus
DrawEdge
GetDC
BeginPaint
EndPaint
GetClassInfoExA
GetClassNameA
ValidateRect
ReleaseDC
GetWindow
CloseWindow
ShowWindow
IsIconic
GetWindowTextLengthA
RegisterClassA
GetForegroundWindow
GetParent
GetActiveWindow
GetWindowTextA
gdi32
ExtCreatePen
GetColorSpace
CreateDIBitmap
GetCharWidthA
CreateDCA
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ