Static task
static1
Behavioral task
behavioral1
Sample
2c5d9b4d7cc61f3678772bb468cc6c2b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c5d9b4d7cc61f3678772bb468cc6c2b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c5d9b4d7cc61f3678772bb468cc6c2b_JaffaCakes118
-
Size
57KB
-
MD5
2c5d9b4d7cc61f3678772bb468cc6c2b
-
SHA1
70914a18e53a4a27ec46acf01baadcf2b41aed93
-
SHA256
e0b1ce1cf2c0e1b2e670cee66b162ff74bb009ba607a557a7b2173dba2577c77
-
SHA512
a725c2008ef3faf75c3674bfeb62a37da4107f1b2ccc3a2592732c85768aea594f8c85d1ce36f16e9b18c78fc67ae9bf95e1b0f745329ca67876876aa62a5757
-
SSDEEP
1536:Sr5BlLE6Qw5lHfGY+2/LGPY8Pj3aP4fWndV8F:SPlFp5Z/VLw5PjqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c5d9b4d7cc61f3678772bb468cc6c2b_JaffaCakes118
Files
-
2c5d9b4d7cc61f3678772bb468cc6c2b_JaffaCakes118.exe windows:5 windows x86 arch:x86
2108cbff184a36fbde288becba12e474
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemCount
SetDlgItemTextW
PeekMessageW
LoadStringW
GetMenu
DestroyMenu
SendMessageW
GetCapture
InsertMenuW
kernel32
SetEndOfFile
GetTickCount
SetLastError
GetCurrentThreadId
GetLastError
FindResourceW
GetExitCodeProcess
GetCommandLineW
ExitProcess
GetOEMCP
IsBadWritePtr
GetThreadPriority
OpenEventA
GetThreadLocale
GetCurrentProcess
GetFileAttributesA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetProcessHeap
GetConsoleMode
lstrcmpA
GetFileSize
GetModuleHandleA
lstrcatW
FindResourceA
GetVersion
FindNextFileW
ResumeThread
OpenMutexW
GetCurrentProcessId
VirtualAlloc
TerminateProcess
OpenEventW
FreeEnvironmentStringsW
Sections
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ