Static task
static1
Behavioral task
behavioral1
Sample
2915b1e2970a9ddcec4c4e1f5c0811fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2915b1e2970a9ddcec4c4e1f5c0811fb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2915b1e2970a9ddcec4c4e1f5c0811fb_JaffaCakes118
-
Size
36KB
-
MD5
2915b1e2970a9ddcec4c4e1f5c0811fb
-
SHA1
59e52690108e1c582245cf2395c22fbed983b670
-
SHA256
ff271a29aa2a6eb6e0e92ea43bfe280e971fd690d541db155b03db5cb45203f6
-
SHA512
de2324f815dca4591c436807158799234c794c585f192c711c8602a1bb9654fea2d993f08b44f00a797bfe04fae4fef0aa00a58302f16085a3502ed2ab23b90f
-
SSDEEP
768:mm9w0M1WIFLJ7qZGF7zZJnti64EHJ/hGySKnN1:mmy1WiqGti64Ep5DN1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2915b1e2970a9ddcec4c4e1f5c0811fb_JaffaCakes118
Files
-
2915b1e2970a9ddcec4c4e1f5c0811fb_JaffaCakes118.exe windows:3 windows x86 arch:x86
8627e2bb8a87b81ef6679d65b3963eb9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GlobalLock
GlobalUnlock
ReadFile
GetModuleHandleA
GetProcAddress
user32
GetWindowDC
SetActiveWindow
GetFocus
gdi32
EndDoc
LPtoDP
SetMapMode
Sections
PESEC0 Size: 227B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PESEC1 Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 459B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ