Static task
static1
Behavioral task
behavioral1
Sample
2a8630c2b9a163e8b79c22023db9bdd2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a8630c2b9a163e8b79c22023db9bdd2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a8630c2b9a163e8b79c22023db9bdd2_JaffaCakes118
-
Size
154KB
-
MD5
2a8630c2b9a163e8b79c22023db9bdd2
-
SHA1
e0eb8ab49186e87b67cbfe568c91dd46696f3803
-
SHA256
c790238dad048bd6d7bf4a54b15151db814675dd8f337245b58c353bf27152e9
-
SHA512
ea34e618206c52cb71850512a5a5e8c1832bfad1110581cefbd2653dc91df917400ee8c9159f875e65970290a4ce93bf7e45b3afb15e6955010a3666a6b36d9a
-
SSDEEP
3072:OT9Ayiq/4aMYLw7Kk10t7jFOXjqnheT9pdjkZId1//5XRb410s8F:/gwaNN7psjmhSxkZIdR/5XRb410s+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8630c2b9a163e8b79c22023db9bdd2_JaffaCakes118
Files
-
2a8630c2b9a163e8b79c22023db9bdd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8f96f3ec3aa8c64edeaaad7010cbf3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
LocalFree
GetLastError
CreateEventA
lstrlenA
FreeConsole
OpenMutexA
IsBadReadPtr
FindClose
GetModuleHandleA
ResumeThread
VirtualProtectEx
GetStdHandle
OpenMutexA
GetSystemTime
LoadLibraryExW
CloseHandle
FreeEnvironmentStringsA
GlobalLock
GetACP
user32
IsMenu
CreateWindowExA
DialogBoxParamA
ClipCursor
GetMessageA
SetFocus
IsIconic
GetComboBoxInfo
GetDlgItemTextA
GetSubMenu
LoadCursorA
GetMessageA
EndDialog
MessageBoxA
msasn1
ASN1BEREncOpenType
ASN1BERDecCheck
ASN1DecAlloc
ASN1BERDecBool
ASN1BEREncNull
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE