Static task
static1
Behavioral task
behavioral1
Sample
2e57eab89b57aa3fc15270bd42372652_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e57eab89b57aa3fc15270bd42372652_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e57eab89b57aa3fc15270bd42372652_JaffaCakes118
-
Size
36KB
-
MD5
2e57eab89b57aa3fc15270bd42372652
-
SHA1
54d653caf0fc3287cbb7eb1239d6ffc2bbeff3fa
-
SHA256
5bb959623e4cff6c449921d3edf35932b2b609d404f745043c45f6bef242728b
-
SHA512
ef749c9c88a1af65b7da4f2d348660a529343aebfbb78415e3cf43615ca3829ad85af0666d7634ee0811c782152ce036638f2aaed113713de2e7e9e10dc1fa32
-
SSDEEP
384:7FBFfQiU4I5mlXr8mNwgTBYS206dX15vy3zWFY0AoJjxGPLpg:pBFIeI6xBYo6drvun0AoJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e57eab89b57aa3fc15270bd42372652_JaffaCakes118
Files
-
2e57eab89b57aa3fc15270bd42372652_JaffaCakes118.exe windows:4 windows x86 arch:x86
79b8c2a4de3495debe40aa12d5baf574
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
lstrlenW
Sleep
OutputDebugStringW
TerminateProcess
CloseHandle
FlushFileBuffers
WriteFile
OutputDebugStringA
GetCurrentThreadId
ExitProcess
CreateThread
CreateMutexW
OpenMutexW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetLastError
HeapReAlloc
VirtualAlloc
VirtualFree
GetStringTypeW
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapAlloc
user32
DialogBoxParamW
wvsprintfW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
RegisterClassExW
LoadCursorW
LoadIconW
ShowWindow
CreateWindowExW
UpdateWindow
PostQuitMessage
EndDialog
DefWindowProcW
DestroyWindow
EndPaint
BeginPaint
GetClientRect
DrawTextW
ws2_32
gethostbyname
closesocket
select
connect
htons
inet_addr
socket
recv
WSAStartup
setsockopt
send
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ