Static task
static1
Behavioral task
behavioral1
Sample
2c8895cf3f3e9164be77e1c8b2757e07_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c8895cf3f3e9164be77e1c8b2757e07_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c8895cf3f3e9164be77e1c8b2757e07_JaffaCakes118
-
Size
121KB
-
MD5
2c8895cf3f3e9164be77e1c8b2757e07
-
SHA1
72a3cf0f59a6d952b177d9c67dbb164b9627bc4b
-
SHA256
16585d349d6fd70b241e21b714a931af32cb91ab1826f73c0835800f970aa572
-
SHA512
328e16e0cca2eccba9ff010a516de264549f3ab963a03ddbf14e29b420604eb9ebb2e09a093baae89372700fd132387d6a84319c5b866ba343572f9102867795
-
SSDEEP
3072:L4RC7xn9j+24j21pHpNZgSJvwmCgnRE0kX0kU:Lrxn9j95N+SCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c8895cf3f3e9164be77e1c8b2757e07_JaffaCakes118
Files
-
2c8895cf3f3e9164be77e1c8b2757e07_JaffaCakes118.exe windows:5 windows x86 arch:x86
1aa45d124aca6695ed3a2e3ab5d05de3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
GetWindowLongA
SetWindowTextA
GetDlgCtrlID
WindowFromDC
LoadIconA
LoadCursorA
RegisterClassExA
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
EnableWindow
gdi32
CreatePen
GetDeviceCaps
CreateCompatibleBitmap
DeleteObject
GetStockObject
SetMapMode
CreateEllipticRgn
ole32
OleIsRunning
CoGetCurrentProcess
oleaut32
VectorFromBstr
kernel32
GetDriveTypeA
InitializeCriticalSection
EnterCriticalSection
GetModuleHandleA
HeapAlloc
LeaveCriticalSection
DeleteCriticalSection
GetEnvironmentStrings
InterlockedExchange
GetStartupInfoA
GetACP
GetLastError
HeapDestroy
SetFileAttributesA
HeapCreate
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ