Static task
static1
Behavioral task
behavioral1
Sample
2e587d720123499fbacd354925ae813c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e587d720123499fbacd354925ae813c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e587d720123499fbacd354925ae813c_JaffaCakes118
-
Size
50KB
-
MD5
2e587d720123499fbacd354925ae813c
-
SHA1
63f624dfd336ddca744d2ae89f46089f30bd67f4
-
SHA256
69779cfa5b23b8575c90edd66fa597a7c5f0abadd8c577b6d9ce31b38ea46adb
-
SHA512
ee8275db29f27b1349396ea36436938a032f1fbc428040d8308271d26603cc3ab0cbb72371bc5d6c66c9611c9ea1e1c260cea2f2e3c2d830ecfdda1af2fc4f29
-
SSDEEP
768:uuqJsDYQHpI3zEBLUTknoe2vSOp2eglb8UhruMNAOOjQHxbG1WFhZg0tUaQ+xdM:psGUwtq2egyUhh2OOjQHxbG1sr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e587d720123499fbacd354925ae813c_JaffaCakes118
Files
-
2e587d720123499fbacd354925ae813c_JaffaCakes118.exe windows:4 windows x86 arch:x86
2cc6f5ffda17d0fabcb910a918bb5976
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetWindowTextLengthA
DrawTextW
DrawIcon
CopyImage
DrawIconEx
GetCursor
gdi32
GetBrushOrgEx
CreatePenIndirect
CreateDIBSection
RestoreDC
GetBitmapBits
CreateBrushIndirect
SetTextColor
CreateFontIndirectA
GetDCOrgEx
comctl32
ImageList_EndDrag
ImageList_LoadImageW
ImageList_Copy
ImageList_GetIconSize
CreateStatusWindowW
DrawStatusText
DllGetVersion
DrawStatusTextW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 80KB
IMAGE_SCN_MEM_READ