Static task
static1
Behavioral task
behavioral1
Sample
2be67f105ae9719b96ea4a0db359b1fc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2be67f105ae9719b96ea4a0db359b1fc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2be67f105ae9719b96ea4a0db359b1fc_JaffaCakes118
-
Size
498KB
-
MD5
2be67f105ae9719b96ea4a0db359b1fc
-
SHA1
92f2d2aa806e2d5bbfcbd99348b6290726e70b9b
-
SHA256
f6934f7909b07843bdf493a99bc644a69580426f435aaa207c1c6155dcb6101a
-
SHA512
92b57bfc8fbe34b888e512bd5edfea0fb136c824a039d64f67f385e21afd9f259dfd3361684dd3ec67569e7a22c8418d5b7df379e681b3927afaaf9d29bdf48e
-
SSDEEP
12288:nZGx3rVAC9xO+Z4W20fP25jMOkZTEBRe4lWIOZBkgTY63he:nZGx7Vn14j0fP25AOuJsrOZBkgTd3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be67f105ae9719b96ea4a0db359b1fc_JaffaCakes118
Files
-
2be67f105ae9719b96ea4a0db359b1fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8da9fcefeb391738d7ffe57fff8b690
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
SetDlgItemTextA
SendMessageA
MessageBoxA
LoadStringA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamA
kernel32
FindResourceA
SetFileAttributesA
LoadResource
GetModuleHandleA
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindFirstFileA
GetModuleFileNameA
FormatMessageA
GetLastError
SizeofResource
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ExtractIconA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 494KB - Virtual size: 493KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ