Static task
static1
Behavioral task
behavioral1
Sample
2668ba54caf1a26c6718ca3293fcd680_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2668ba54caf1a26c6718ca3293fcd680_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2668ba54caf1a26c6718ca3293fcd680_JaffaCakes118
-
Size
647KB
-
MD5
2668ba54caf1a26c6718ca3293fcd680
-
SHA1
a5e1128e59368a7a8580a1d16cc7ebb9325943e5
-
SHA256
e674283864f8f1dd3dfb0891214e3891a61a3a19b052a0f0d319a7071bbbed94
-
SHA512
ee10c2876cbce0cb42b8bff6ad92e81d94b641d0d50623b6eb55e0e42d73b27d6570e71ed9fa8194a7b2f3ec1c2c2fa0dfe07d9de097714fbd1753f14112f20e
-
SSDEEP
6144:JtKMVyYscNWMkJTnrBnme5+J7yW6ZB5zk:JjVfscNWMkJTnrBnmi+JJE5zk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2668ba54caf1a26c6718ca3293fcd680_JaffaCakes118
Files
-
2668ba54caf1a26c6718ca3293fcd680_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0c5ec1782e8b6ac98caeff679157390
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
FindFirstFileA
GetCommandLineA
GetVersionExA
GetModuleHandleA
GetStartupInfoA
FindClose
user32
DispatchMessageA
TranslateMessage
GetMessageA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2owr4 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE