Static task
static1
Behavioral task
behavioral1
Sample
2d3fb2abfdf9a671f4b2d865d15a3d03_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d3fb2abfdf9a671f4b2d865d15a3d03_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d3fb2abfdf9a671f4b2d865d15a3d03_JaffaCakes118
-
Size
23KB
-
MD5
2d3fb2abfdf9a671f4b2d865d15a3d03
-
SHA1
9fc4d3daaa814c57d9cb5503e2b577d52dad56c2
-
SHA256
ca0ef09ff5a116227fceb8935071c7f0c9d752683f9acb1e9aab4a1c172ce785
-
SHA512
985a04fb3f4d2899c9ac0df95741b3d3735cf067109dbf68878b07be97e9a9131c192e4662ddfbda35f360f368db3b707828e1373776a9e6de97f0bf00161d8b
-
SSDEEP
384:sdiOK1GQoOozX4RJyobRjXV0SGM82VnTLlt70lXXI:sQYQfaX4J1jyTM1BnlUX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d3fb2abfdf9a671f4b2d865d15a3d03_JaffaCakes118
Files
-
2d3fb2abfdf9a671f4b2d865d15a3d03_JaffaCakes118.exe windows:4 windows x86 arch:x86
8067865d8adfab392b5939f493a8bf95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetLastError
GetFileSize
GlobalAlloc
lstrlenA
LocalAlloc
LocalFree
GetModuleHandleA
CreateEventA
user32
TranslateMessage
GetWindowRect
SetWindowTextA
MessageBoxA
EndPaint
GetFocus
gdi32
BitBlt
CreateFontIndirectA
GetPixel
MoveToEx
GetTextColor
GetBkColor
GetDeviceCaps
SetROP2
CreateCompatibleDC
LineTo
GetObjectA
GetStockObject
PatBlt
DeleteObject
SetBkMode
ExtTextOutA
GetTextExtentPoint32A
Sections
.text Size: 512B - Virtual size: 479B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 997B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrs Size: 15KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ