Static task
static1
Behavioral task
behavioral1
Sample
2566b5dd39c22fc8214752985164832d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2566b5dd39c22fc8214752985164832d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2566b5dd39c22fc8214752985164832d_JaffaCakes118
-
Size
159KB
-
MD5
2566b5dd39c22fc8214752985164832d
-
SHA1
92a7a02de4fe0800858d30ad6ad01106178ffe21
-
SHA256
c93980bb0ef7326b9d5b8c6322cdc0a2b88a39e3c40e2f0d67a2c62286e992ca
-
SHA512
2c9847d32807a3a6eeab4f2744c087699ba8887bff442906bc4146e54f9ebf3bad065360f003840f3e60955eb19950263ea5a96e8e2121878867169bd218d099
-
SSDEEP
3072:cDU2cl5+yIsGvj90fO4kOh/JWQHAKnt5sS/ci8m8r5xNGhq4gACebjHWc/b1+GD/:2cL+yIsGb9gRWIAYxcp33Un1nD/hGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2566b5dd39c22fc8214752985164832d_JaffaCakes118
Files
-
2566b5dd39c22fc8214752985164832d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2c2fa44ca5f25b0268bb08ffc27f7a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
IsBadCodePtr
lstrcat
EnterCriticalSection
LoadLibraryExA
SetConsolePalette
GetStdHandle
WriteProfileStringA
RaiseException
VirtualAlloc
DeleteAtom
GlobalFree
GetOEMCP
GlobalAddAtomA
SetCommBreak
GlobalAddAtomA
LoadResource
LocalFree
GlobalUnlock
HeapCreate
user32
AlignRects
GetActiveWindow
IsIconic
GetWindowTextLengthA
CloseWindow
ValidateRect
GetClassNameA
DrawEdge
BeginPaint
GetClassInfoExA
EndPaint
GetWindow
GetForegroundWindow
GetFocus
GetWindowTextA
ShowWindow
GetParent
ReleaseDC
GetDC
wsock32
WSAGetLastError
WSACleanup
WSASetBlockingHook
WSAStartup
WSAAsyncGetServByPort
linkinfo
CreateLinkInfoA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ