Static task
static1
Behavioral task
behavioral1
Sample
c2a85c6147ad6ce9999f440a6d32d508_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2a85c6147ad6ce9999f440a6d32d508_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2a85c6147ad6ce9999f440a6d32d508_JaffaCakes118
-
Size
321KB
-
MD5
c2a85c6147ad6ce9999f440a6d32d508
-
SHA1
c6d96ac0e92f908b51c3327b7427e0060591b732
-
SHA256
7839b59c64424ad10fa440aa7106cece70abb6acb4ea777fdc55e96311de3bbc
-
SHA512
12296bb027fb9ab4591a5ca24452fdb857085a09a47881da15ce74986ac3fbb80d3e8827d596caa1a5ccdf478a3df6e9ba3f254a424f6f73b9ceee6e9ae5b9ba
-
SSDEEP
6144:YdVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkYfE:YdctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a85c6147ad6ce9999f440a6d32d508_JaffaCakes118
Files
-
c2a85c6147ad6ce9999f440a6d32d508_JaffaCakes118.exe windows:4 windows x86 arch:x86
18a9df0d4adb2066b8d5899769e71927
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadLibraryExA
RaiseException
FoldStringA
GlobalFree
HeapCreate
GetLocaleInfoA
SetConsoleOutputCP
GetStdHandle
Sleep
SetErrorMode
GetDriveTypeA
EnterCriticalSection
VirtualProtect
InterlockedExchange
GlobalUnlock
GlobalDeleteAtom
GetACP
CloseHandle
GlobalAddAtomA
GetLastError
user32
GetCursorPos
GetActiveWindow
DrawTextA
ValidateRect
GetWindowTextA
ClipCursor
GetClassNameA
GetParent
IsIconic
CharToOemBuffA
GetFocus
GetMenuItemInfoA
GetWindow
ShowWindow
SetForegroundWindow
DrawEdge
BeginPaint
EndPaint
ReleaseDC
version
GetFileVersionInfoA
VerFindFileA
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ