Static task
static1
Behavioral task
behavioral1
Sample
2ed6afffc6fad0eb7a91fae9a82bbe88_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ed6afffc6fad0eb7a91fae9a82bbe88_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ed6afffc6fad0eb7a91fae9a82bbe88_JaffaCakes118
-
Size
18KB
-
MD5
2ed6afffc6fad0eb7a91fae9a82bbe88
-
SHA1
d169adf94fcca4ecec84e07df50ff1bc52f89cb5
-
SHA256
d1c2be43dd1ab9f2180d156e4f3073699038ee5583b88800e7940fee74a95bdd
-
SHA512
20c5c49a183e16c5137ba8a0683f0e0513efc9c25b8a9b695e44918b1c4c07b67d291646e1e291a46163f3e92ce6aad561dc97fcee8ec46f433ce6e377b5388e
-
SSDEEP
384:5BxRf/r2Zi3cQD7NLtycc55Yq+TJpZ/3VvXK:5BiiL54veTZ/5XK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed6afffc6fad0eb7a91fae9a82bbe88_JaffaCakes118
Files
-
2ed6afffc6fad0eb7a91fae9a82bbe88_JaffaCakes118.exe windows:4 windows x86 arch:x86
65d8eed425873eababeb76f337c2118a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
LoadLibraryExA
GetCommandLineA
PeekConsoleInputA
GetUserDefaultLCID
HeapCreate
GetCurrentProcessId
VirtualProtect
FreeConsole
InterlockedExchange
GetModuleHandleA
GlobalMemoryStatus
GetTimeFormatA
GetACP
HeapDestroy
GetOEMCP
IsDebuggerPresent
GetTapeStatus
GetSystemTime
WaitForSingleObject
ResumeThread
user32
GetWindow
AnyPopup
GetClassNameA
FrameRect
GetParent
BeginPaint
EndPaint
FillRect
ShowWindow
ReleaseDC
GetCursorPos
DrawTextA
SetForegroundWindow
wsprintfA
GetDC
CreateIcon
GetFocus
DragDetect
GetTitleBarInfo
ntshrui
GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
DllGetClassObject
IsFolderPrivateForUser
SetFolderPermissionsForSharing
hnetcfg
IcfFreeProfile
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ