Static task
static1
Behavioral task
behavioral1
Sample
ed56025851cfd9633f43c5c512e51a52_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ed56025851cfd9633f43c5c512e51a52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ed56025851cfd9633f43c5c512e51a52_JaffaCakes118
-
Size
287KB
-
MD5
ed56025851cfd9633f43c5c512e51a52
-
SHA1
91a8ddf1e1f8e9af39495b154da970506f7e2dbf
-
SHA256
d0e03130123ac87a3fef8b6c9ae681c9a65ee5fdac775035a3c49486da74cd7b
-
SHA512
c92f45ed6449b45b16cfba7639e6817b3276b6d0444f8ed210330bf6fd061d337271876cb55aa25112147544ed13fdfcba13c47649636584d667e2d76329452f
-
SSDEEP
6144:PgDM0/DOpaYvsc/DWnSPkpkT/X+5PrMBv2Q3cW/6rt:PgwC6paYvsc/DVP+7qeQLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed56025851cfd9633f43c5c512e51a52_JaffaCakes118
Files
-
ed56025851cfd9633f43c5c512e51a52_JaffaCakes118.exe windows:4 windows x86 arch:x86
4219a8d85b9adfb2b3b42bc63ddc1226
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
EnumResourceNamesA
GetStartupInfoA
VirtualAlloc
GetModuleHandleA
ExitProcess
EnumResourceTypesA
VirtualQueryEx
FindResourceA
user32
DialogBoxParamA
GetWindowTextA
SetParent
SendMessageA
BeginPaint
CallWindowProcA
SendDlgItemMessageA
GetWindowLongA
ws2_32
listen
send
bind
setsockopt
WSACleanup
closesocket
socket
WSAStartup
ole32
BindMoniker
CoReleaseMarshalData
CoReleaseServerProcess
CoRegisterMallocSpy
PropVariantChangeType
CoResumeClassObjects
CLIPFORMAT_UserFree
Sections
CODE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 272KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ