Static task
static1
Behavioral task
behavioral1
Sample
2d532ebaeb57dd91794a757bbdb38689_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d532ebaeb57dd91794a757bbdb38689_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d532ebaeb57dd91794a757bbdb38689_JaffaCakes118
-
Size
60KB
-
MD5
2d532ebaeb57dd91794a757bbdb38689
-
SHA1
2d202781d16304259e13cd09597df5877d591688
-
SHA256
f6d8a0b60030aace4b1891a49e42863bb765fda0977d843258550732ed2045fc
-
SHA512
c6cb69fb4490b73ee817cfc15619b89499c666687ca4129948bd10aa41e23ee871c991aa18c590fafb5033f5b725a4e701b71b14adb06f666f55c85055657386
-
SSDEEP
768:AOGJgU1zkWZbx+HkXAoLovJXmc4arSRGg/oHcKrHmAuCNBAj4H0cdYwG8gK39W/:AOGiWzNZ4vw5R9/o8f1cBk4UuzRg/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d532ebaeb57dd91794a757bbdb38689_JaffaCakes118
Files
-
2d532ebaeb57dd91794a757bbdb38689_JaffaCakes118.exe windows:1 windows x86 arch:x86
c357cea54ce73a28eed56b70ff043b00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
BitBlt
CreateCompatibleDC
CreateDIBitmap
CreateFontA
CreatePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
LineTo
MoveToEx
RealizePalette
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetTextColor
user32
BeginPaint
CheckMenuItem
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawTextA
EndDialog
EndPaint
FillRect
GetClientRect
GetDC
GetDlgItemTextA
GetMenu
GetMessageA
GetSysColor
GetSystemMetrics
GetWindowRect
InvalidateRect
IsDialogMessageA
IsIconic
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadIconA
MessageBeep
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassA
SetDlgItemTextA
SetFocus
SetTimer
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
kernel32
ExitProcess
GetCommandLineA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
Sleep
_lclose
_lcreat
_lopen
_lread
_lwrite
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE