Static task
static1
Behavioral task
behavioral1
Sample
2d1beba650b64a8403030342e9874142_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d1beba650b64a8403030342e9874142_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d1beba650b64a8403030342e9874142_JaffaCakes118
-
Size
290KB
-
MD5
2d1beba650b64a8403030342e9874142
-
SHA1
6b0f6468c18c09e9b00f038a76f41bceefa72dc2
-
SHA256
09e4d297b00eb9b460350c067c20d0b0cd9e785cf3b19318c5b0c2f95e42f07a
-
SHA512
6d177a82fb0dc74f2158c602e4db077f4f6269540e6b78ffa2a14c76bf382743e6a4ee5c2cc79777bb319e2fe47b6fd8f46d2d99b76442bbf9b94672f36b1ae9
-
SSDEEP
6144:CJ2m1n3RcAd+Dfgd4hvqOZx2wukh7W0TKfEDaeL90flmKYvEnJw/G8pP:cr7ioChdxdWM750fwKIpp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d1beba650b64a8403030342e9874142_JaffaCakes118
Files
-
2d1beba650b64a8403030342e9874142_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ea53f938e9b8d10b1a795b2d2933924
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
user32
GetMenu
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: 269KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE