Static task
static1
Behavioral task
behavioral1
Sample
2ee5426b775d4111d42977dd4f43551a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ee5426b775d4111d42977dd4f43551a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ee5426b775d4111d42977dd4f43551a_JaffaCakes118
-
Size
31KB
-
MD5
2ee5426b775d4111d42977dd4f43551a
-
SHA1
8745419f523ee85cee0c677e7065a76a04fb2fdf
-
SHA256
b9023d88ef0bdf445896c16ed8caa0622c35ecb0cb885377a598a913ae046caa
-
SHA512
d276ef318a7b79bbe25fb5b75be46c7b510fed82b1d3ec8a5a94811ec4e0a052423280edb94c97edf4cfb4c2e440968756adb3746e1fb733d0f9a47134dea6bb
-
SSDEEP
768:ByyyyyyyyyyyyyyyyhP16R5Vh4DF3ZizYAbPhJvsCLXTHJYdQId1kr:fPYRx4DNZizfbhJvNLDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ee5426b775d4111d42977dd4f43551a_JaffaCakes118
Files
-
2ee5426b775d4111d42977dd4f43551a_JaffaCakes118.exe windows:8526 windows x86 arch:x86
4dcbf8ef52e32b5402ed2c0ea9729378
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
lstrcpyW
GetModuleFileNameA
WaitForSingleObject
HeapReAlloc
HeapReAlloc
UnhandledExceptionFilter
GetLastError
GetStartupInfoW
UnhandledExceptionFilter
GetACP
GetCommandLineW
lstrlenW
WideCharToMultiByte
CreateFileW
GetStartupInfoA
LocalAlloc
InterlockedDecrement
GetStartupInfoA
HeapReAlloc
GetModuleHandleA
WaitForSingleObject
VirtualAlloc
EnterCriticalSection
EnterCriticalSection
LoadLibraryW
CreateThread
GetCommandLineW
CloseHandle
GetACP
LeaveCriticalSection
GetVersionExA
CloseHandle
SetLastError
GetCurrentThreadId
ExitProcess
CreateThread
GetVersionExA
user32
SetForegroundWindow
LoadStringW
SetFocus
PostMessageW
GetCursorPos
WinHelpW
GetParent
SetRect
PostMessageW
GetMenu
DefWindowProcW
GetSysColor
ReleaseCapture
IsIconic
SetForegroundWindow
MessageBoxA
FillRect
DefWindowProcW
GetWindowLongW
MoveWindow
GetWindowLongW
FindWindowW
GetSystemMetrics
DispatchMessageA
GetKeyState
BeginPaint
LoadAcceleratorsW
PeekMessageW
GetCursorPos
KillTimer
IsDialogMessageW
PtInRect
GetSubMenu
ShowWindow
OffsetRect
GetWindowLongW
GetParent
DialogBoxParamW
SetFocus
wsprintfW
PeekMessageW
GetFocus
PtInRect
BeginPaint
GetParent
SetWindowPos
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ