Static task
static1
Behavioral task
behavioral1
Sample
2de95cce90fb38ba39e73675a3cce014_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2de95cce90fb38ba39e73675a3cce014_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2de95cce90fb38ba39e73675a3cce014_JaffaCakes118
-
Size
36KB
-
MD5
2de95cce90fb38ba39e73675a3cce014
-
SHA1
cd92f4e460385afdf1b6cccfb2f048e2822022f2
-
SHA256
bd45ae39bafba8f8c92fb80502e53d3a5efbd8e8aceaf51120cd7c6e0ec93692
-
SHA512
3783e90ba5389e70e702f0a183970b4710af0686eac8d8309ce79e9fec75363f01f1fb9ff1b96864ecea989541bb92f26b625622338b888159f8c499fb5fe0aa
-
SSDEEP
768:NO2gdn/gWmPsAc2eScHO4LzYfBABAH3LElKfsE19cik:NHgOBsA5ClLzY5XLEMfsE19cik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de95cce90fb38ba39e73675a3cce014_JaffaCakes118
Files
-
2de95cce90fb38ba39e73675a3cce014_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c8bccc9e77b540df5fadcbe963cbaeb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
GetVersionExA
ReadConsoleInputA
ScrollConsoleScreenBufferA
WriteConsoleOutputA
CreateFileA
Sleep
GetStdHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.dspak Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE