Static task
static1
Behavioral task
behavioral1
Sample
2a2820ad71f176977366800708265e16_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a2820ad71f176977366800708265e16_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a2820ad71f176977366800708265e16_JaffaCakes118
-
Size
949KB
-
MD5
2a2820ad71f176977366800708265e16
-
SHA1
63f9570e24d67e8deecf9cd74f353a2ec4d31c17
-
SHA256
e296e9502b128c882b9acdad87b0992aaf1afe693e02638217cac25205092c43
-
SHA512
6f839c2d03a4f4f3a076f7286ed7b7b3608f6c4b28778f97206f87766ca12bab6444e255ada62d2d873e4f0afdb64b2c0f3f811be2cf71c9fb5e1d712a11b994
-
SSDEEP
24576:7P6/lKmsHgZbHJa9JBQPf+LFoLpWBb83JF:7C/lUHoJucPf+LcpWB+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2820ad71f176977366800708265e16_JaffaCakes118
Files
-
2a2820ad71f176977366800708265e16_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ef9d8c4d3f530580f6ed7a9607bef3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
MessageBoxA
MessageBoxA
GetDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
GetModuleFileNameA
LoadLibraryA
advapi32
RegFlushKey
comctl32
ImageList_Add
gdi32
SaveDC
oleaut32
VariantCopy
version
VerQueryValueA
Sections
.text Size: 29KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE