Hai
Static task
static1
Behavioral task
behavioral1
Sample
2d351ee9ceec1479597d7740492dcb7a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d351ee9ceec1479597d7740492dcb7a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d351ee9ceec1479597d7740492dcb7a_JaffaCakes118
-
Size
144KB
-
MD5
2d351ee9ceec1479597d7740492dcb7a
-
SHA1
a8c6b8054e1c0c3c094fcd4e4171ef4f64b023a0
-
SHA256
de1322c4734633c02711ca9fb1aa5feaebb389abe4370fb9add1e256cf339d70
-
SHA512
50e2ae005bb46fdb28bd3dc08252929dfeb9a3d231d2ba73f9e09c60a9741ee3a4be576a0970a9bb99b8c03894873f85ea41fee9373fd2a62efbf4c458b5dc09
-
SSDEEP
3072:7yJGmYX9iw346DAXzz1dSXJ/7sdMRW4L21Ks5GCCgNUQwqT08h6NKlfM0ize3tz2:7yGmsiw346DyWdsmRWrAFCCgNUGIk6Nc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d351ee9ceec1479597d7740492dcb7a_JaffaCakes118
Files
-
2d351ee9ceec1479597d7740492dcb7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Exports
Exports
Sections
PREVIEW Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PREVIEW Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PREVIEW Size: 71KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PREVIEW Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE