Static task
static1
Behavioral task
behavioral1
Sample
2ec5483b16c3197b9fe2c53f77388476_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ec5483b16c3197b9fe2c53f77388476_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ec5483b16c3197b9fe2c53f77388476_JaffaCakes118
-
Size
393KB
-
MD5
2ec5483b16c3197b9fe2c53f77388476
-
SHA1
1443ac3d29ee65d3a43f82238414f7f77ff507a7
-
SHA256
0efb1f03d0a89fd377f0a37fe43db8404a2f4925f0005cd2b929acd944726d05
-
SHA512
8e1cd12216096a40edf56530ebe0a8fbe62ddc53dfdceb541153f0855e2b48ac92470e0e3d81c1258dadfc2635e65d0baa1d104ad828a39accfadee98e270ac1
-
SSDEEP
12288:y+3KpJI6xj1dV9fJcEXW4OYIb5IiENCav:y+Cb1dV9fJhXWGHN/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec5483b16c3197b9fe2c53f77388476_JaffaCakes118
Files
-
2ec5483b16c3197b9fe2c53f77388476_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6b9636ec558711e1c9297d4c7bcf41b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalLock
GetConsoleCP
GlobalUnlock
CreateFileMappingA
CloseHandle
FreeEnvironmentStringsA
TlsGetValue
HeapCreate
CreateFileA
WaitForMultipleObjects
LoadLibraryExA
GetCalendarInfoA
GetLastError
GetACP
GetModuleHandleA
GetConsoleAliasA
FindAtomA
LocalFree
FindClose
Sleep
user32
CallWindowProcA
DispatchMessageA
GetDlgItem
CreateDialogParamA
DefWindowProcA
GetDC
DrawTextA
DrawEdge
SetFocus
GetIconInfo
GetMessageA
CascadeWindows
IsWindow
MessageBoxA
msasn1
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecEoid
ASN1BERDecCheck
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ