Static task
static1
Behavioral task
behavioral1
Sample
2c2deb8f0045a3c87253c9375ddb4d93_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c2deb8f0045a3c87253c9375ddb4d93_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c2deb8f0045a3c87253c9375ddb4d93_JaffaCakes118
-
Size
31KB
-
MD5
2c2deb8f0045a3c87253c9375ddb4d93
-
SHA1
01638d21e8c84134cce60b76bee4f8dd92e31c72
-
SHA256
9ccbf5cde1cf08dbe94600ff135ad82577138e0ffa8442a3c3dea60d5148c583
-
SHA512
4e7b82e0c56c0364c3b3098a6d96168634874d965d17aaee248e469d17c1ae8f34baccb701246c41a9ebfeb1700853b9bd9ecaf2d846f54d91bad5d5a49b91f8
-
SSDEEP
768:CeCTK8rXNbbmuH71fyzVxTe4tUwNHBA3rhVnv:CeCTlr93TZf14tL/AhVv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2deb8f0045a3c87253c9375ddb4d93_JaffaCakes118
Files
-
2c2deb8f0045a3c87253c9375ddb4d93_JaffaCakes118.exe windows:4 windows x86 arch:x86
729e838be968fa14a71d465fced7267a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
advapi32
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE