Static task
static1
Behavioral task
behavioral1
Sample
2ed10292f85272cadd6c5a06c5714919_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ed10292f85272cadd6c5a06c5714919_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ed10292f85272cadd6c5a06c5714919_JaffaCakes118
-
Size
336KB
-
MD5
2ed10292f85272cadd6c5a06c5714919
-
SHA1
43049b914ab32542ac921f48b49b96b402edc1b7
-
SHA256
116e1819a85a102163f7f0a67c61efa6735c2bf70eb2255c59b9069664245dda
-
SHA512
b6593f57a2a6b22dd83fe65da20705060222640bdfc13e812e7e6194523bd6f68c14d9b875fbd9774eaa850d830473d0c843ca4d30197c4a1a24af11212636cf
-
SSDEEP
6144:gDQ1qkautcHSyYKQbCvHQdIlZ9PwSCnPqcQUSSm:gmqGt3p8HQdIlZJNCnPhDSSm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed10292f85272cadd6c5a06c5714919_JaffaCakes118
Files
-
2ed10292f85272cadd6c5a06c5714919_JaffaCakes118.exe windows:4 windows x86 arch:x86
55da9ea951977f865e7ccd91b566009e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
ExitProcess
GetTimeZoneInformation
GetCommandLineA
GetVersionExA
VirtualProtect
user32
SetDlgItemInt
InvalidateRect
GetClipboardSequenceNumber
LockWindowUpdate
LoadBitmapW
GetMessagePos
EnumDisplaySettingsExW
CreateDialogParamA
IsCharAlphaNumericA
GetParent
CharPrevA
TranslateMessage
RegisterClipboardFormatA
GetMessageW
DrawTextA
GetWindowPlacement
LoadMenuIndirectW
WindowFromPoint
RemovePropA
gdi32
GetPaletteEntries
GetPixel
Escape
Chord
EnumMetaFile
GetCharWidthW
GetTextExtentExPointA
PolyBezier
GetStretchBltMode
CreateDCW
ChoosePixelFormat
GetTextMetricsW
GetTextCharacterExtra
comdlg32
ReplaceTextA
ChooseColorW
PrintDlgA
advapi32
ReadEventLogW
SetSecurityDescriptorOwner
SetEntriesInAclW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
CryptVerifySignatureW
IsValidAcl
EnumServicesStatusW
EnumDependentServicesW
ObjectCloseAuditAlarmA
RegEnumKeyExA
CreateServiceA
GetSidSubAuthorityCount
ole32
CoGetClassObject
CoResumeClassObjects
OleSaveToStream
comctl32
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_LoadImageW
setupapi
SetupDiGetDeviceInstallParamsA
Sections
.text Size: 312KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE