Static task
static1
Behavioral task
behavioral1
Sample
2ce0486d49454a0044382c58ad7b3ea0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
2ce0486d49454a0044382c58ad7b3ea0_JaffaCakes118
-
Size
2.0MB
-
MD5
2ce0486d49454a0044382c58ad7b3ea0
-
SHA1
592a6eb88a445af9e16fc9de90b81c4a27f23287
-
SHA256
c2082a7ab3cbe0a18fb35d01cee02163e26efed532de700591988fb740bdd7d8
-
SHA512
4db5c41afe9995ec7e904e46a06c4110760624d2f5f5351fdfe87281397900cd6b6c49245be0d567430d2151e1ee969bdef7847a260820101be510647cb4a5ce
-
SSDEEP
49152:tJaDckb52ON1dZO4T+v4cUQOunpYfq89txvLVhWH6oapS6B:TaDckb4O9ZO4TaUQOqYy8DRLaaogS6B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce0486d49454a0044382c58ad7b3ea0_JaffaCakes118
Files
-
2ce0486d49454a0044382c58ad7b3ea0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8bd4a1dec3633539c5bcb2bb9e56589
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FormatMessageA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
EmptyClipboard
advapi32
RegCloseKey
oleaut32
GetErrorInfo
mpr
WNetGetConnectionA
version
GetFileVersionInfoSizeA
gdi32
GetDeviceCaps
ole32
StringFromCLSID
comctl32
ImageList_GetImageCount
shell32
SHGetPathFromIDListA
wininet
HttpOpenRequestA
comdlg32
GetOpenFileNameA
wsock32
getservbyname
Sections
B,M#6uZ0 Size: - Virtual size: 974KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mLOWx$GL Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tJC2JY3) Size: - Virtual size: 71KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W])/0t!> Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t0)NI?T* Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
%VD(o/01 Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
<FK&BY)^ Size: - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
:>BUWOBO Size: 7KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A6k[r*2v Size: - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
EKDjT.-l Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
H!_024*d Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ