Static task
static1
Behavioral task
behavioral1
Sample
2c4a1a794479916c450c713ef47f50e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c4a1a794479916c450c713ef47f50e9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c4a1a794479916c450c713ef47f50e9_JaffaCakes118
-
Size
104KB
-
MD5
2c4a1a794479916c450c713ef47f50e9
-
SHA1
da2b74197af452cb3236fd771a73507d03632e64
-
SHA256
9c7c81bcc5c10aa0f17acba62ceac2a244c49de3d1b2109acb15dc2eedcea027
-
SHA512
7dc2d7e9c59a7832758674b954bab82adadb911990cc919cd80792e5a1b67300a6c7ab4fc2336e9c167ac666e64197bb0017162be8c5de0f3c879183228d548a
-
SSDEEP
1536:+Q9H0ROzM6a/Q0Q1cxiG20HdwSxl7fKv2dWeo5gxHfDzP1jU7oMH8AaL5Kbk:+KIQJqxk0HdbxlDKv2wuxtjU/8D5Kbk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c4a1a794479916c450c713ef47f50e9_JaffaCakes118
Files
-
2c4a1a794479916c450c713ef47f50e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
82262b3d57e463fc4d82cb5b10adbca5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings
user32
TranslateMessage
GetMessageA
DispatchMessageA
oleaut32
VarRound
ole32
CreateObjrefMoniker
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ