Static task
static1
Behavioral task
behavioral1
Sample
2ce3da97b82f2b9997c4be1d79c277a0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ce3da97b82f2b9997c4be1d79c277a0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ce3da97b82f2b9997c4be1d79c277a0_JaffaCakes118
-
Size
130KB
-
MD5
2ce3da97b82f2b9997c4be1d79c277a0
-
SHA1
7febcc871e91afd4865b58446f655da1be40e0e1
-
SHA256
e32cfd5e9093fbb8c8a5d2fddae8a3686882264b54eb885fa5b445a8a83f6628
-
SHA512
4ee8e25860cfff96da5ad21892f2b04baafb055c70a80708f7d6b49ed4ab0aa6ccfeee689f251d8ad8af388c6f615fe94f0a40aff08faa3a6024b349168411cc
-
SSDEEP
3072:CN/WdemQxTWiTZnxvvEmyn43Wzkap32/Pv4awHrJWnwNd:CNudGTXZnxvZyn43ofJ2/tCgnw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce3da97b82f2b9997c4be1d79c277a0_JaffaCakes118
Files
-
2ce3da97b82f2b9997c4be1d79c277a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
bcb6e694f8abf2508fd6da7a55043f39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oledlg
OleUIBusyW
user32
IsWindow
SetTimer
SetMenuItemBitmaps
InvalidateRgn
GetWindowLongW
CheckMenuItem
PeekMessageW
IsWindowVisible
GetSystemMetrics
GetDesktopWindow
DispatchMessageW
IsIconic
SetActiveWindow
GetClientRect
EnableMenuItem
MessageBeep
GetNextDlgTabItem
PostMessageW
UpdateWindow
SetMenu
SetWindowContextHelpId
GetSysColorBrush
GetMenuState
GetWindow
EndDialog
MapDialogRect
ValidateRect
PostQuitMessage
GetDlgItem
EnableWindow
DrawIcon
CreateWindowExW
GetParent
GetMenuCheckMarkDimensions
GetActiveWindow
ModifyMenuW
GetNextDlgGroupItem
DestroyWindow
CreateDialogIndirectParamW
LoadBitmapW
SetWindowPos
GetKeyState
GetCursorPos
IsWindowEnabled
GetFocus
TranslateMessage
comctl32
InitCommonControlsEx
kernel32
LockResource
CreateMutexW
ReleaseMutex
GetModuleFileNameW
InterlockedExchange
FreeLibrary
FreeEnvironmentStringsA
GetModuleHandleW
FindResourceW
MultiByteToWideChar
EnumResourceLanguagesA
GetLastError
GetProcAddress
LoadLibraryW
ExitProcess
CloseHandle
GlobalAlloc
SizeofResource
WaitForSingleObject
lstrlenW
LoadResource
CreateProcessW
SetCurrentDirectoryW
CompareStringA
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ