Static task
static1
Behavioral task
behavioral1
Sample
c2537960b2e3caff4485db3c79ff926e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c2537960b2e3caff4485db3c79ff926e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2537960b2e3caff4485db3c79ff926e_JaffaCakes118
-
Size
49KB
-
MD5
c2537960b2e3caff4485db3c79ff926e
-
SHA1
3dd429ba1d9c683620945f76e5f73fb1595f5420
-
SHA256
50f1ae48e99a79c138f4907c9fd6c6b07f317e524180710e08e1b8a397f7f41f
-
SHA512
23714c86d6393bea3f1967f566d77fd67ee1af4ca17fbaee3cb969266acca06775432ad8c249075ffb94ccb10026d04f6b0c823eca4d6abfbf83a7cae8711753
-
SSDEEP
768:YL2ZE9ez2DG2ypXj9kU8xYZs5zLW9wRPbqjYvUdRC:C2ZE9+2DypXj9kU8xYZs5i94PbqjYvUm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2537960b2e3caff4485db3c79ff926e_JaffaCakes118
Files
-
c2537960b2e3caff4485db3c79ff926e_JaffaCakes118.exe windows:4 windows x86 arch:x86
20523c2b8c23038c971ee4bb530b6078
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextA
CloseWindow
GetCursor
LoadCursorA
GetMenu
GetDC
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbs Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ