Static task
static1
Behavioral task
behavioral1
Sample
2c88e35616660ad80efbf556c76265f2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c88e35616660ad80efbf556c76265f2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c88e35616660ad80efbf556c76265f2_JaffaCakes118
-
Size
294KB
-
MD5
2c88e35616660ad80efbf556c76265f2
-
SHA1
0561558a42029a59b2fffc37c7c987e6eab0990d
-
SHA256
4827dfb94bd497ac357dc9aa1f70242799d6ed4df77881ace0546bbe0d7a689a
-
SHA512
06147933471b9bbf3ee2d1962336228feff8e27c56cfce26fb835d255080655da6b127eb3b0fa42461ef4a1476b4879149813e1591b65c7914bd017b713ac8ca
-
SSDEEP
6144:+HMCNxDAKHhmgsvorxhC7JCEl2eecFlGWrAZV+2WAX/OqGcu/:iDggsvow7J72enGMAZV+2Jm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c88e35616660ad80efbf556c76265f2_JaffaCakes118
Files
-
2c88e35616660ad80efbf556c76265f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcaad6cbf7dae17d891fe556dd0d3d5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetProfileIntA
GetStdHandle
VirtualProtect
GetVersion
TlsFree
HeapReAlloc
WaitForSingleObject
TlsGetValue
GetModuleHandleA
HeapWalk
GetConsoleCP
lstrlenA
LoadLibraryA
CloseHandle
GlobalUnlock
GetAtomNameA
CompareFileTime
InterlockedExchange
FindAtomA
GetACP
user32
TranslateMessage
GetWindowTextA
LoadIconA
PaintDesktop
InsertMenuA
GetMenu
GetMenuStringA
GetDlgItem
GetScrollRange
DialogBoxParamA
InflateRect
ModifyMenuA
SubtractRect
CreateCaret
EnableScrollBar
DestroyMenu
EqualRect
PostQuitMessage
SetWindowPos
UpdateWindow
DispatchMessageA
SetPropA
CopyRect
PostMessageA
ShowWindow
MessageBoxA
GetKeyboardLayout
msi
MsiEnumProductsA
MsiGetMode
MsiDoActionA
MsiEnumClientsA
MsiCloseHandle
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ