Static task
static1
Behavioral task
behavioral1
Sample
2cb18576c8a49910f4a962c1c50f04e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cb18576c8a49910f4a962c1c50f04e5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cb18576c8a49910f4a962c1c50f04e5_JaffaCakes118
-
Size
158KB
-
MD5
2cb18576c8a49910f4a962c1c50f04e5
-
SHA1
b6155d9918109a064ed76f454a27a0a6746428a2
-
SHA256
8e4716357c8787729cc9ddf2858f0a55e952aaaf1d899a39be81676b9f8d4f86
-
SHA512
c15dda5235ca667f79ff47b4185158d8e7505f23968806f2f0828b52e2f118b376ac5f7750ef4f082b804d58a703c65dc39d6509e1db05bb04151b835d23de9e
-
SSDEEP
3072:OtcdLqiGRSfT4LRSeAptEj9/69GvWFbxlvSYZTFTWEojO27ohuXbXljNA0:IcdLeSfT4GbEjRAGvUvSYjTeFV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb18576c8a49910f4a962c1c50f04e5_JaffaCakes118
Files
-
2cb18576c8a49910f4a962c1c50f04e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
dcbe64c2205f3ac23685dd118f8ab6ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetStartupInfoA
user32
GetWindowRect
EnableWindow
FillRect
BeginPaint
gdi32
CreateFontIndirectA
oleaut32
GetErrorInfo
SysAllocStringLen
msvcrt
_controlfp
_except_handler3
__set_app_type
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strrev
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE