Static task
static1
Behavioral task
behavioral1
Sample
2a056535a61db5eacbce986fc6b2fa46_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a056535a61db5eacbce986fc6b2fa46_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a056535a61db5eacbce986fc6b2fa46_JaffaCakes118
-
Size
7KB
-
MD5
2a056535a61db5eacbce986fc6b2fa46
-
SHA1
eda867c7400223a40b65cb22342e60907f647ddb
-
SHA256
f36cfa3c2a34a5afaaa1d775a67ad20e93c839513a7b8b4e2e8d3bd426490799
-
SHA512
d49c29bf177c6dee27f97d791f575e63ab689e25c60c5f76b30a30840c7a8c4eebb7375e622bc2fc97d654e93943f67dee2cc13ea26bfbc5e2101a0478cc93bf
-
SSDEEP
96:RiMHEyoSzici2pquEMrV+wO+spasqSTGPECgCdukZNX6Mly:gMHE/1cAuEcsjT2hkkZNX6P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a056535a61db5eacbce986fc6b2fa46_JaffaCakes118
Files
-
2a056535a61db5eacbce986fc6b2fa46_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a349f2e61dab14d0d58a35ac37aed65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
strcat
user32
EnableWindow
FindWindowA
ShowWindow
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE