Static task
static1
Behavioral task
behavioral1
Sample
2c1c3bd6b1c15d6bb6da0075d1672738_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c1c3bd6b1c15d6bb6da0075d1672738_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c1c3bd6b1c15d6bb6da0075d1672738_JaffaCakes118
-
Size
89KB
-
MD5
2c1c3bd6b1c15d6bb6da0075d1672738
-
SHA1
d0834807eb0546d58804a38cad934e940a5761a1
-
SHA256
7f877290fbaf113e00fda4f63efe0ad7b2b00b1815fd495c9ef0cb9181e096de
-
SHA512
69782ac8dbf1d4e8290cffd6ed467b3a10ecde02adaea9bed0d3fdd94c3cddfd3308cf35a084387ebd21be895711816ed37b12d433881c9bf39b9746f657aa39
-
SSDEEP
768:w8uLn2wQ3nRpY319OXvMntxiLXTZ5xqcqlb/KyJpq+FMLwKbnRC7s:w1c3n8EXacHAlbiyCL0KtC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c1c3bd6b1c15d6bb6da0075d1672738_JaffaCakes118
Files
-
2c1c3bd6b1c15d6bb6da0075d1672738_JaffaCakes118.exe windows:4 windows x86 arch:x86
dac4bf2eff79497aa101736c505cb70f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
FindClose
GetDiskFreeSpaceA
TlsGetValue
SetEvent
SearchPathA
GetTickCount
FindResourceExA
CreateThread
Sleep
VirtualProtect
CloseHandle
GetCalendarInfoA
GetModuleHandleA
ReleaseMutex
FindVolumeClose
ExitProcess
DeleteCriticalSection
lstrlenA
GetLastError
user32
EnableWindow
GetMessageA
CopyImage
DispatchMessageA
DragDetect
GetUpdateRect
GetScrollBarInfo
CreateMenu
CreateWindowExA
EndDialog
CloseWindow
DialogBoxParamA
IsIconic
GetKeyState
msdmo
DMOGetName
DMOEnum
DMOUnregister
DMOGetTypes
DMORegister
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE