Static task
static1
Behavioral task
behavioral1
Sample
02ce2a85bd9629dfb87e35fd10b47742_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02ce2a85bd9629dfb87e35fd10b47742_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
02ce2a85bd9629dfb87e35fd10b47742_JaffaCakes118
-
Size
83KB
-
MD5
02ce2a85bd9629dfb87e35fd10b47742
-
SHA1
a0914f0fdee45c902410e74a3552a36e9d1d6918
-
SHA256
eae5b3918449289d8862597aa8454a423c846c8629b26ec809a11d8030e6de26
-
SHA512
c2440765cc8dff1ec95350362683e39798ae4e7f7d5de4e2f6b4451f2af5532b41e207b7b2ff96e782d6e715d02a06a022ac13ef75723477ea25e161bea43863
-
SSDEEP
1536:Fw+BiUOv61pNLw7TTmeKjQUStWZlQfHolhIMjpg4w/m10:7BihvicX6fGW68CMjpg4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02ce2a85bd9629dfb87e35fd10b47742_JaffaCakes118
Files
-
02ce2a85bd9629dfb87e35fd10b47742_JaffaCakes118.exe windows:5 windows x86 arch:x86
19fe1fadf37ed2fe4ae9c58ff342b167
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGetHashParam
kernel32
CloseHandle
shlwapi
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharUpperW
CloseDesktop
DispatchMessageA
ExitWindowsEx
GetDlgItem
GetDlgItemTextA
GetIconInfo
GetKeyboardState
GetWindowLongA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
SendMessageA
Sections
.xwxun Size: 40KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fqv Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vwxip Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
7ykcvdeg Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbj8gnal Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ