Static task
static1
Behavioral task
behavioral1
Sample
2f8a6632b6322d88dbab747387bd2b53_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f8a6632b6322d88dbab747387bd2b53_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f8a6632b6322d88dbab747387bd2b53_JaffaCakes118
-
Size
330KB
-
MD5
2f8a6632b6322d88dbab747387bd2b53
-
SHA1
c83f8433f5d0c915de2b5ce301525b87320c327a
-
SHA256
4df251913400e3a9807881a1ea6b7131d39ce57103ef216f61e714e705731bd4
-
SHA512
38b2300f77b2e3dbdab7571202e75b4430860db4ea673d66921257bf4eb52a70dfc7618cd5bf46e87b16fcb9fbabea5f5c0a816620bec3017a7fad437f2ba67d
-
SSDEEP
6144:WAsPrH0Z/DHLbJFWxGKWMehb9r4lCHItT9SnCQQHzzuhSwWiw:WbPrHK7H+xGlMehb9b2aQTzoWj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f8a6632b6322d88dbab747387bd2b53_JaffaCakes118
Files
-
2f8a6632b6322d88dbab747387bd2b53_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f16a4c131d3952d4729d069492bdb4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateToolhelp32Snapshot
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
advapi32
RegQueryValueExA
avicap32
capCreateCaptureWindowA
gdi32
UnrealizeObject
ole32
CoCreateInstance
oleaut32
SafeArrayPtrOfIndex
shell32
ShellExecuteA
user32
CreateWindowExA
MessageBoxA
wininet
InternetReadFile
Sections
CODE Size: - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ