Static task
static1
Behavioral task
behavioral1
Sample
2e8c57a47c4b74ad63de60fe9c858791_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e8c57a47c4b74ad63de60fe9c858791_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e8c57a47c4b74ad63de60fe9c858791_JaffaCakes118
-
Size
36KB
-
MD5
2e8c57a47c4b74ad63de60fe9c858791
-
SHA1
86fd104cf8ce06a9d8d7bb31f0e232dd225f7fdf
-
SHA256
d759207544c6723d4497fb8673ae070dde8c6aa4de4a5e13d11ff817a7620cde
-
SHA512
f3cdc487a8d7da6f41497fa71ba0b0500ccef650ef780f543a7e797aa8d2cf4383a892668d27c8366342cf23c06646439a2bbdd39422001f5dd1b3d52ca9e222
-
SSDEEP
384:lJEKyf3ZEGs4Mphzji0aXIP7Z99JBu5cw:LEPf3KHT97V3Oc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e8c57a47c4b74ad63de60fe9c858791_JaffaCakes118
Files
-
2e8c57a47c4b74ad63de60fe9c858791_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc75a24ace593fab66484539adf75069
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
FindAtomW
GetModuleHandleA
ResumeThread
GetDiskFreeSpaceW
ResetEvent
LocalFree
ReleaseMutex
GetTickCount
CreateThread
SetLastError
CloseHandle
lstrcmpiW
GetFileAttributesW
SetEvent
HeapCreate
GetCommandLineW
GetComputerNameA
GetSystemTime
CreateFileA
user32
GetClipCursor
CreateWindowExA
SetFocus
GetComboBoxInfo
CloseWindow
DispatchMessageA
DestroyCaret
GetKeyState
DrawStateA
GetClassInfoA
FillRect
CallWindowProcA
GetDlgItem
MessageBoxA
cryptdlg
CertTrustCertPolicy
CertTrustFinalPolicy
CertConfigureTrustA
CertTrustInit
DecodeRecipientID
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE