Static task
static1
Behavioral task
behavioral1
Sample
2d4bb198e2c1b85e6c53a6b6c23c6a66_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d4bb198e2c1b85e6c53a6b6c23c6a66_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d4bb198e2c1b85e6c53a6b6c23c6a66_JaffaCakes118
-
Size
80KB
-
MD5
2d4bb198e2c1b85e6c53a6b6c23c6a66
-
SHA1
fb3332f443eef96e0443d8db18a20254b38beefb
-
SHA256
f62f523f3fd33587944998eb95b7937d0fe61a85ba55a9b2eaa4c901cab6d3ec
-
SHA512
9bf5f1c88686c2597a78df65f9465bf52b94b8db387ffc8a1c279f0c25dd814b611a426009d9adcc6375046947ee8ea5ec490c624a44f74f2dc676cbb9e5f481
-
SSDEEP
1536:P0im+Lsa6y4H1HBiuGcGl52xzo40jBXqMY30kjpEtS8AKVSn4mxgo0:Mim+L/8dB5pGl5VRqMYhjpEtTVuHgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d4bb198e2c1b85e6c53a6b6c23c6a66_JaffaCakes118
Files
-
2d4bb198e2c1b85e6c53a6b6c23c6a66_JaffaCakes118.exe windows:4 windows x86 arch:x86
52f0ff4d64c7e63d504503798a879d8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
CancelIo
CancelTimerQueueTimer
CloseHandle
CreateFileMappingW
ExitProcess
FindClose
FindNextVolumeW
FormatMessageA
GetACP
GetCalendarInfoA
GetCommandLineA
GetEnvironmentVariableA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetVersion
GetVersionExA
HeapAlloc
HeapCreate
SetComputerNameExA
SetLastError
_llseek
lstrcpynA
user32
TranslateMessage
SetWindowLongA
SetPropA
DestroyIcon
SetMenuItemInfoA
SetFocus
RegisterWindowMessageA
RedrawWindow
IsZoomed
IsIconic
GetUpdateRgn
FindWindowA
EnumChildWindows
DefDlgProcA
CreateMenu
BeginPaint
wsprintfA
DialogBoxParamA
olepro32
OleLoadPicture
OleCreatePropertyFrameIndirect
OleIconToCursor
oleacc
LresultFromObject
oledlg
OleUICanConvertOrActivateAs
OleUIAddVerbMenuW
OleUIAddVerbMenuA
OleUIChangeIconA
OleUIChangeIconW
odbc32
SQLPrimaryKeysA
SQLPrepareA
SQLCopyDesc
CloseODBCPerfData
Sections
.text Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ