Static task
static1
Behavioral task
behavioral1
Sample
2e10b90b4da1896309f631aa5386e71b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e10b90b4da1896309f631aa5386e71b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e10b90b4da1896309f631aa5386e71b_JaffaCakes118
-
Size
181KB
-
MD5
2e10b90b4da1896309f631aa5386e71b
-
SHA1
a4f9049f3ddff872e6771ecc132a344466439685
-
SHA256
52e09d08e981d967589ef07931c53d1d1f7cebe0bfa03152e9281fb53a365e30
-
SHA512
1595aec98c4a9326a6a1d9cea6d443356fbf27303a5f3e8ba4c1dcdf9e8e49c8e7c5d9c30b7140e4552d9702fdbc461fc26de9542918eed7080943c0fee3688c
-
SSDEEP
3072:6Mmgs8QbROL6NqrynMo50Lfm7csBZYJ+dE6wLkQp8v1xYVJQunMIg42Xqma2LD0G:6RFOm422yIcZYJ+26wbmv1xkJQIMIg4E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e10b90b4da1896309f631aa5386e71b_JaffaCakes118
Files
-
2e10b90b4da1896309f631aa5386e71b_JaffaCakes118.exe windows:4 windows x86 arch:x86
03767fa5a730f7fcf22331e621d435e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
wsprintfA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
Sections
.text Size: 19KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE