Static task
static1
Behavioral task
behavioral1
Sample
2a303ec9ceb3c61f139aff55e72d197b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a303ec9ceb3c61f139aff55e72d197b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a303ec9ceb3c61f139aff55e72d197b_JaffaCakes118
-
Size
418KB
-
MD5
2a303ec9ceb3c61f139aff55e72d197b
-
SHA1
7487f245bddfcc9dbe616a20b7183ff24b8118e5
-
SHA256
e8d07debfca2fa6fc744d4fe35bb1208f7fe020b9e4d036b0e534f47dbdce719
-
SHA512
79bb1b4a29ea599accc68695a466667b66ca221583173e541b516c8cedd9349db43406170172608c3698baeb7e89a6faaae607da06804e64da96f3b64af1880e
-
SSDEEP
6144:/4xG29gAWTpi4AJLSo230C8oykj+f7E7uA+vf7NMrHnm1oASoJycNGY1j2vVW:/wGWgAWd3oO8o5j+7cu1g6EoQcp1y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a303ec9ceb3c61f139aff55e72d197b_JaffaCakes118
Files
-
2a303ec9ceb3c61f139aff55e72d197b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9006809b3abba6d8e5c39c55b99a65c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolderW
DragQueryFileW
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
netapi32
DsGetDcNameW
NetApiBufferFree
ws2_32
WSAAddressToStringA
mpr
WNetGetUniversalNameW
user32
EnumPropsW
wmi
WmiSetSingleItemA
gdi32
GetTextExtentPoint32W
advapi32
ReportEventW
RegDeleteKeyW
RegOpenKeyW
GetSecurityDescriptorLength
MapGenericMask
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
IsValidSecurityDescriptor
RegEnumKeyW
RegCloseKey
RegSetValueExW
CloseEventLog
RegQueryValueExW
OpenEventLogW
RegEnumKeyExW
kernel32
VirtualAlloc
GetLastError
Beep
gpedit
BrowseForGPO
lz32
GetExpandedNameA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ