Static task
static1
Behavioral task
behavioral1
Sample
2a5c856d8f585043c78863c3e2b9f2f3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a5c856d8f585043c78863c3e2b9f2f3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a5c856d8f585043c78863c3e2b9f2f3_JaffaCakes118
-
Size
107KB
-
MD5
2a5c856d8f585043c78863c3e2b9f2f3
-
SHA1
98bdd8b2c5ef9de41c0fbddd6bc71a8e29bb266c
-
SHA256
26d9da9544ee2d72701571e9735dbf6bc02de5906eeda6b746e6287ff6d30f51
-
SHA512
16d87d248877ae8379ef1ede89cf17a6f5bf725fb4841e19ce12e21e20f91011fb0666f2e004fe74de63221c41a46cf2f8613d80ae262845881879b641583830
-
SSDEEP
3072:rAY48G38KgkiZ85F7ozwpjzuTtEPk+jffU+SBcI:rAY4DMTMDpzkaE+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a5c856d8f585043c78863c3e2b9f2f3_JaffaCakes118
Files
-
2a5c856d8f585043c78863c3e2b9f2f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
d513a3f34f0f475ce221e71f69e9bffc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
CoInstall
AsyncInstallDistributionUnit
URLOpenStreamA
IsLoggingEnabledA
GetClassFileOrMime
IsValidURL
gdi32
ResetDCW
StretchBlt
SetICMMode
SetRelAbs
SetDIBColorTable
UpdateColors
SaveDC
TextOutW
shell32
StrRStrIW
SHAppBarMessage
SHFormatDrive
Sections
.text Size: 24KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE