Static task
static1
Behavioral task
behavioral1
Sample
2b24ac35fae6b89ed391c332b8e6c19a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b24ac35fae6b89ed391c332b8e6c19a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b24ac35fae6b89ed391c332b8e6c19a_JaffaCakes118
-
Size
14KB
-
MD5
2b24ac35fae6b89ed391c332b8e6c19a
-
SHA1
ea3aebd661c27d77f7399745e778bd0e4c32bcbc
-
SHA256
38e8492f08c902eeda6e724ada4441617e4e893bd1645bde41cce84a7f7b2fb1
-
SHA512
17d647dde6d0dd75a761d8817f6eb08b0b7562cfc1ee3d920a3b95e9ac9ee4515971c253a67da6fe9919e4b407c9b346055479ee5d73662b179d6e6a468c071e
-
SSDEEP
96:nPCtk0HspHsF2Yy0No6gMhK6GteXwxal2YhcV9WMsn1xLVk4PLZ:nKklyFLy0Ntgjteg1WhLP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b24ac35fae6b89ed391c332b8e6c19a_JaffaCakes118
Files
-
2b24ac35fae6b89ed391c332b8e6c19a_JaffaCakes118.exe windows:1 windows x86 arch:x86
5cf49c4ef60713fe1643bcd4f487170e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
DialogBoxParamA
FindWindowA
EnableWindow
LoadIconA
GetSysColor
GetClassInfoExA
SetForegroundWindow
EndDialog
MessageBoxA
RegisterClassA
LoadCursorA
GetSysColorBrush
GetDlgItemTextA
GetDlgItem
wsprintfA
SetWindowTextA
SetDlgItemTextA
SendMessageA
RegisterClassExA
gdi32
SetTextColor
SetBkMode
shell32
ShellExecuteA
kernel32
lstrcatA
WriteFile
LoadLibraryA
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
SetFilePointer
SetFileAttributesA
GetModuleHandleA
SetEndOfFile
ReadFile
lstrcpyA
GetFileSize
CreateFileA
CloseHandle
comdlg32
GetOpenFileNameA
Sections
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 419B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE