Static task
static1
Behavioral task
behavioral1
Sample
2e3f755977968f0abf692226023700a6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e3f755977968f0abf692226023700a6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e3f755977968f0abf692226023700a6_JaffaCakes118
-
Size
426KB
-
MD5
2e3f755977968f0abf692226023700a6
-
SHA1
ea15a124609542a9337918282d6a99bd9cefe36e
-
SHA256
9f10901242e3ddcc347b9809aa888333137d672e9dad01126c11adf40118b5c7
-
SHA512
58c9f32ecc7bb648d9f3dab1dfd700db0c73a554b50208d8b9006abf5454f84a88627a84a593334fb13d892064f89e9bcac8046f4daf035c9970b51a27a7d808
-
SSDEEP
6144:Z/LAIpAScN1j59URf98lUnT9uHxG7mq6Tcs02Cwg7/pdV+kGfGLZXLy93jAxEWv7:5pAP1XUz8lYT9I4ja9O7/XGuN7Dgm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e3f755977968f0abf692226023700a6_JaffaCakes118
Files
-
2e3f755977968f0abf692226023700a6_JaffaCakes118.exe windows:5 windows x86 arch:x86
d1d23156da5df822fc54f4616d0080cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextW
msimg32
AlphaBlend
gdi32
Pie
version
VerQueryValueW
ole32
OleInitialize
comctl32
ImageList_Add
winspool.drv
OpenPrinterW
Sections
.MPRESS1 Size: 332KB - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE