Static task
static1
Behavioral task
behavioral1
Sample
2c798abdbf020598b96b11a8dc6e58ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c798abdbf020598b96b11a8dc6e58ab_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c798abdbf020598b96b11a8dc6e58ab_JaffaCakes118
-
Size
321KB
-
MD5
2c798abdbf020598b96b11a8dc6e58ab
-
SHA1
c3d4fa5b44c751f92e9221cdd58e39ed319211a1
-
SHA256
d15307992ed4d23bfa554f48885924d1c5225c7eb33a051199e31358a7fad30b
-
SHA512
dfb9d97c0c4db9d548aff8eb9d7fe4a475043e8ac82cedd4e1d3db3a9abe6669414c4dd7b578ebf98c655ebdd0cf933e4ae0c836e082d65a653940f748b368ff
-
SSDEEP
6144:NdVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkYfE:NdctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c798abdbf020598b96b11a8dc6e58ab_JaffaCakes118
Files
-
2c798abdbf020598b96b11a8dc6e58ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
18a9df0d4adb2066b8d5899769e71927
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadLibraryExA
RaiseException
FoldStringA
GlobalFree
HeapCreate
GetLocaleInfoA
SetConsoleOutputCP
GetStdHandle
Sleep
SetErrorMode
GetDriveTypeA
EnterCriticalSection
VirtualProtect
InterlockedExchange
GlobalUnlock
GlobalDeleteAtom
GetACP
CloseHandle
GlobalAddAtomA
GetLastError
user32
GetCursorPos
GetActiveWindow
DrawTextA
ValidateRect
GetWindowTextA
ClipCursor
GetClassNameA
GetParent
IsIconic
CharToOemBuffA
GetFocus
GetMenuItemInfoA
GetWindow
ShowWindow
SetForegroundWindow
DrawEdge
BeginPaint
EndPaint
ReleaseDC
version
GetFileVersionInfoA
VerFindFileA
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ