Static task
static1
Behavioral task
behavioral1
Sample
2dda24901f41cb79f6bcacadf1b287c6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2dda24901f41cb79f6bcacadf1b287c6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dda24901f41cb79f6bcacadf1b287c6_JaffaCakes118
-
Size
932KB
-
MD5
2dda24901f41cb79f6bcacadf1b287c6
-
SHA1
a36a0fbc8f0a0a266b31e50fa6cbe02a13a383f0
-
SHA256
c9b10af919d7bbbdf826d000ffa037dbc436a80227c2b616c86810c8a0e503d9
-
SHA512
5fb2c8b21b4b18517ad2d25084bb16c13723656a84248bbe4556b02a4e259e742d90feba998bd26158dfc96fdb1f021a05d6b8a77bb86f3ff61e664096f52a87
-
SSDEEP
24576:ep7u9S0smzlf84b/dxvdciy4sD5Jgcaleq:+76SCzlhvoLJgca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dda24901f41cb79f6bcacadf1b287c6_JaffaCakes118
Files
-
2dda24901f41cb79f6bcacadf1b287c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
cde208667bc1bd8c291d53fdc8960d90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
GetPropA
gdi32
DeleteObject
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
ControlService
shell32
ShellExecuteW
comctl32
ord17
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CLSIDFromProgID
oleaut32
SysFreeString
wsock32
WSAAsyncSelect
Sections
.text Size: - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SHARDAT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 543KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.v0 Size: - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.v1 Size: 888KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ