Static task
static1
Behavioral task
behavioral1
Sample
2a4e2d23c372841ba26b9d76a48052ef_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a4e2d23c372841ba26b9d76a48052ef_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a4e2d23c372841ba26b9d76a48052ef_JaffaCakes118
-
Size
155KB
-
MD5
2a4e2d23c372841ba26b9d76a48052ef
-
SHA1
0e405859e38720d101c9be9434d5649d4f76c007
-
SHA256
cd44986bb30dc26642a4d90144e7285cba27ace37dfa04236c2ce8ff8ecf4798
-
SHA512
e18f41e4d8e5a5403f2eb38900c1f4b8c97491371e2558fbdab30e70369571421822b7b0828ecae4a84ab65ae29d4a083dec260648e7be6e1405d649bc3d3da1
-
SSDEEP
1536:/ikQBPhWETgmnol4ATDjYiR9FBxRY3UmZBNn1GEhVmfVZRtAw349wqXqef0z/:KTBPhHgso2ATFTxRyUm9nvmdZMwMaR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a4e2d23c372841ba26b9d76a48052ef_JaffaCakes118
Files
-
2a4e2d23c372841ba26b9d76a48052ef_JaffaCakes118.exe windows:1 windows x86 arch:x86
b30281e96151eb834fe72397eef4e241
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoInitialize
CoUninitialize
user32
LoadAcceleratorsA
EndPaint
CheckMenuRadioItem
InsertMenuA
UpdateWindow
gdi32
GetDeviceCaps
SetMapMode
CreatePen
CreateCompatibleDC
kernel32
GetStartupInfoA
SetProcessWorkingSetSize
GetSystemTimeAsFileTime
GetModuleHandleA
GetCPInfo
msvcrt
_XcptFilter
_adjust_fdiv
__getmainargs
_controlfp
_except_handler3
_acmdln
_exit
_aligned_realloc
memcpy
__p__fmode
__set_app_type
_initterm
exit
__setusermatherr
__p__commode
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ