Static task
static1
Behavioral task
behavioral1
Sample
2af08386c8c58712dc588f8522a97e95_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2af08386c8c58712dc588f8522a97e95_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2af08386c8c58712dc588f8522a97e95_JaffaCakes118
-
Size
317KB
-
MD5
2af08386c8c58712dc588f8522a97e95
-
SHA1
9462882808703c80edd378ae4bb3b2b8ce8c1935
-
SHA256
84178aa65c43cc956a69be78eb2be31e78bd25aad4d8218232f4d0f1c7e81da8
-
SHA512
de11615e8382b10e411c64ad70e9d328fb4ac9950a4fc2984105655eb123f8b807bf56767403b6332dd0371f4f1c51799f764adea9e2c5cfeaa8d98013fad98f
-
SSDEEP
6144:o0rNeC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:o0+nX5Hrlcnr6hDLstzzYSMaBOwUsRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2af08386c8c58712dc588f8522a97e95_JaffaCakes118
Files
-
2af08386c8c58712dc588f8522a97e95_JaffaCakes118.exe windows:4 windows x86 arch:x86
7164873b25586213044296dd27c6bac6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LoadResource
HeapCreate
EnterCriticalSection
LocalFree
IsBadCodePtr
FreeConsole
GetStdHandle
CloseHandle
GlobalAddAtomA
GlobalFree
SetConsolePalette
LoadLibraryExA
DeleteAtom
GlobalUnlock
GetOEMCP
lstrcpyA
VirtualProtect
WriteProfileStringA
RaiseException
GlobalAddAtomA
user32
DrawEdge
GetForegroundWindow
GetActiveWindow
GetParent
GetDC
GetWindow
GetWindowTextA
CloseWindow
BeginPaint
ShowWindow
EndPaint
GetClassNameA
ReleaseDC
GetClassInfoExA
ValidateRect
GetFocus
GetWindowTextLengthA
AlignRects
IsIconic
mprapi
MprAdminUserOpen
MprAdminUserWrite
MprAdminUserRead
MprAdminUserGetInfo
MprAdminUserClose
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ